Questions tagged [keycloak]
Keycloak is an integrated single sign-on (SSO) and identity manager (IDM) for browser apps and RESTful web services. It is built on top of JBoss and WildFly, it complies with the OAuth 2.0, Open ID Connect (OIDC), JSON Web Token (JWT) and SAML 2.0 specifications.
7,123
questions
0
votes
0
answers
8
views
Autofilling keycloak user data from Azure AD after login
I'm using keycloak to register and login users from Azure AD, I want to link the username and email directly from the Azure AD by following the claim I get from the ID token (https://learn.microsoft....
1
vote
0
answers
11
views
.NET 7 API accepting revoked token by Keycloak
.NET 7 API accepting revoked token by Keycloak
Scenario:
.NET 7 API is accepting the token even that token have been revoked by Keycloak.
Simple sample of configuration auth:
builder.Services....
0
votes
0
answers
10
views
keycloak kc_idp_hint redirect uri always return 401 unauthorised error
I'm new to keycloak.
I tried to implement keycloak in my mvc web application, and i placed one anchor tag with href value mentioned in below format. When I click anchor tag it redirect to identity ...
1
vote
1
answer
25
views
Set up Keycloak 21 with postgres from quay image
I have been trying to set up Keycloak for production without any success.
My Keycloak docker-compose contains:
SSL
Postgres
My build does not contains an inverse proxy.
This is my Docker compose:
...
0
votes
0
answers
9
views
What causes 'The OAuth client was not found Error 401: invalid_client' when trying to authenticate with Google OAuth 2.0 using Keycloak and JHipster?
Using Jhipster I'm expecting a login from google oauth client via keycloak authenticator but get the following error:
The OAuth client was not found.
Error 401: invalid_client
The keycloak redirect ...
0
votes
0
answers
5
views
Unable to install Keycloak Angular 15.2
Unable to install Keycloak in Angular (v15.2) using npm. But able to install keycloak-js
npm install keycloak-angular keycloak-js
Getting this Error!!! Any specific version need to be used?
0
votes
0
answers
9
views
NbOAuth2AuthStrategy with Keycloak returning CORS error when dockerized
I have dockerized an Angular webapp that is logging in to Keycloak using Nebular NbOAuth2AuthStrategy.
The application was working correctly when running on my local machine and connecting to Keycloak ...
1
vote
0
answers
7
views
How to fix broken Keycloak account management page
I have a keycloak server (newest version bare metal via java) running on an cloud server with the following configuration:
KC_HOSTNAME_STRICT=false
KC_HOSTNAME=sso.ecample.com
KC_PROXY=edge
The ...
-1
votes
0
answers
8
views
Keycloak server on Kubernetes cluster not accessible via HTTPS
I am trying to run a keycloak server on my kubernetes cluster as OIDC authority for the kube-api. But I am not able to access keycloak via HTTPS. I am using HA Proxy Ingress Controller which is ...
0
votes
0
answers
19
views
Keycloak access token gets invalid even before the Access Token life span gets expired
i am using keycloak in my client application for Authentication and Authorization purpose. I configured the keycloak Tokens under Relams settings as below
SSO Session Idle - 8 - Hours
SSO Session Max ...
0
votes
0
answers
9
views
Keycloak Authorise subgroup users specific Admin permissions
I am currently facing a problem with Keycloak. I have Groups with Subgroups.
In some of these Subgroups are users who need to have access to edit user in their subgroup, but I can only give them ...
0
votes
0
answers
20
views
Spring Security + Keylock Adapter + Gateway + Kubernetes - too many redirects
I can't figure out how to set up the infrastructure in such a way that everything works.
@KeycloakConfiguration
@EnableGlobalMethodSecurity(prePostEnabled = true)
@FieldDefaults(level = AccessLevel....
0
votes
0
answers
5
views
How can I set the client access type to confidential in Keycloak 20.0.3?
Where can I set the client access type (as confidential) in the keyclock 20.0.3 ?
I am not able to find a option to set the access type.
When creating a client, there is no option also after creation, ...
0
votes
0
answers
14
views
Angular Keycloak setup not working in Microsoft Edge (Third party Cookies)
I have a very weird problem with an angular application that uses keycloak for authentication.
When using Edge, direct-links and page refresh always redirect to the main site of the app. But a direct ...
0
votes
0
answers
18
views
Introspect endpoint with Oauth2 authorization token not working
I am having difficulties making an introspect call to the endpoint using an Oauth 2 token of a client. The client is confidential and the call works fine if I use the basic auth username and password. ...
0
votes
0
answers
34
views
How to get single client session logout in a realm in keycloak? [closed]
While I am trying to logout client 1, it is not working for a particular client, and it is working for client 1 and client 2 at a time, I think it is based upon user session. So please help me out of ...
0
votes
0
answers
12
views
Client role not assigned to the user authenticated with it
I have two custom roles I need to assign to the users ROLE_USER and ROLE_CLIENT.
And there are 2 clients A and B.
The goal is to assign roles to users automatically, depending on what auth type they ...
-1
votes
0
answers
15
views
Kafka with keycloak authorization
I have Spring Boot microservice with kafka comsumer and producer. My problem's secure broker conversation using Keycloak.
I found some github repos like https://github.com/strimzi/strimzi-kafka-oauth ...
0
votes
0
answers
14
views
integrante keycloak with angular
I need some help, I need to integrate a simple web environment with authentication via keycloak, I already have all the data, I performed tests using postman and I manage to generate the access token ...
-1
votes
1
answer
45
views
Keycloak spring-boot spring-security spring-security-oauth2 error 401
Keycloak spring-boot spring-security spring-security-oauth2
Schema: EurekaServer - Spring Cloud Gateway - Microservices
Hello,
I am doing a project using springBoot 2.7.11 and Keycloak 18.0.0 for ...
0
votes
1
answer
13
views
Oidc-client-js getUser() from Keycloak connection after user log-in
I'm trying with Vue 3 Application to get out Userinfo from Keycloak on Docker.
Everything works fine but I really can't understand how to be authenticated or how to use ( or take out... ) an access ...
0
votes
0
answers
32
views
Is there a way to allow the user to manage his data with a REST API call in Keycloak? [duplicate]
The aim is to have a Spring resource server and a Next.js client (with next-auth). Going to the user's profile, the user can edit his username, password etc.
Is there a way for the user to use the ...
0
votes
0
answers
5
views
Is possible the integration between Keycloak and NetIQ Access Manager with SAML protocol
I'm working on a project that includes AWS ec2, Amazon Connect, Keycloak, and NetIQ Access Manager. At this moment I successfully created a SSO mechanism to connect users to Amazon Connect by using ...
-1
votes
0
answers
22
views
facing issue with token timeout in nextjs & keycloak [closed]
I’m facing issue with token timeout in nextjs.
I’ve used keycloak as an auth provider.
basically I won’t to sync auth token idle time with keycloak token.
Either way if I can stop idle time in nextjs ...
0
votes
0
answers
9
views
Failure to get Active directory user list in Keycloak with a Ping Federate OpenID connector
Software version :
KeyCloak 15.0.2
Configuration :
One realm active :
Enabled option set "on"
Client Protocol is "OpenID-Connect"
Access type is "public"
standard Flow ...
0
votes
1
answer
43
views
How can I read a value from header in Azure API Management and pass it to a path param in keycloak realm?
Read value from header in api policy and pass it to api path param in azure policy
Hi I have a requirement where I use keycloak to authenticate my urls. Below is my policy
<policies>
<...
0
votes
0
answers
36
views
How can I fix "Invalid URLS error" when using SpringBoot adapter and KeyCloak with AWS Application Load Balancer?
Hi I am having a problem with SSL termination for SpringBoot adapter and KeyCloak. I am using KeyCloak 15.1.1
Before implementing SSL, everything works fine with HTTP. The headache comes when I ...
0
votes
0
answers
22
views
Keycloak auth request returning 401 error even after successful login and redirect - React JS
After log in with credentials and being redirected back to my website, keycloak request returns 401.
Note! Im running keycloak locally using docker container
This is my code for handling auth within ...
2
votes
1
answer
30
views
How to remove "account" from aud claim in KeyCloak?
I created in the latest Keycloak version using the Admin UI a new client and a user and Evaluate the Client Scopes directly. In the generated access token we can see:
"iss": "..."
&...
0
votes
1
answer
32
views
"The iss claim is not valid" JWT from keycloak behind ingress
Short description
I am creating whole environment for some microservices. I have REST API written in Java with spring boot. I am also using keycloak as identity provider. I put them both in kubernetes ...
0
votes
0
answers
18
views
How to migrate mysql user data to keycloak
how can i migrate mysql user data to keycloak
I want to keycloak migrate mysql user data. After some research, I came across such a plugin. [https://github.com/daniel-frak/keycloak-user-migration](...
0
votes
0
answers
36
views
Keycloak Error while authenticating with Microsoft Identity Provider
We have configured keycloak version 21.0.1 under Azure load balancer with 2 Linux virtual machines and it is using the same database. While authenticating using Microsoft Identity Provider it works ...
0
votes
0
answers
12
views
AWS ALB - proper handling Client Login Timeout when using Keycloak IDP
we have a web app deployed in AWS ECS behind Application Load Balancer. We have configured the Application Load Balancer to securely authenticate users as they access our applications and as the IDP ...
0
votes
1
answer
26
views
Retrieving user's groups from Keycloak via pac4j library
I'm protecting a JavaEE running on Tomcat with the library javaee-pac4j with an OpenID Connect flow (with library pac4j-oidc) that is managed by a Keycloak istance.
After a successful login in ...
0
votes
0
answers
14
views
SSO access to Kibana with Apache2 and Keycloak
for the couple of weeks I have been puzzling over the implementation of the sso for kibana with the keycloack and apache, all the time I get random errors, but I can’t get on the right path..
there is ...
0
votes
0
answers
23
views
Connection refused when trying to send an event from keycloak
I am trying to send an event from a keycloak to an endpoint to another microservice, when i try SimpleHttp.doPost() returns me connection refused. The endpoint itself works fine, so there must be ...
0
votes
0
answers
24
views
ASP.NET Core Web API + Keycloak Authorization + Excel or PowerBI OData feed organisational account
We have developed set of OData APIs and for authorization, we are using Keycloak.
We want to call that API in OData feed with an organisational account.
We tried to authorize API with OData feed ...
0
votes
0
answers
16
views
How to manage and version Keycloak config evolutions?
I have the following use case that has been bugging me for... well years now.
I'm using Keycloak as a SSO for multiple applications. Each time I create a new application it is registered as a new ...
0
votes
0
answers
18
views
Keycloak SSO change user
I have set up Keycloak using Microsoft and Google SSO.
The system, allows users that already have an account in key cloak to login, else they are rejected.
The login flow asks for the username first, ...
0
votes
0
answers
15
views
Allow keycloak user login through a client when user is already logged in through a different client
I have a two clients in keycloak client1 and client2. client1 doesn't have a authentication and client2 have authentication. My FE app connects to client1 and BE connects client2.
A userlogged in ...
0
votes
1
answer
30
views
Keycloak 20 infinispan cache configuration not recognising nodes in HA mode
I have 3 nodes running in HA mode. I enabled infinispan caching for keycloak and provided caching configuration as below in keycloak.conf.
cache=ispn
cache-config-file=keycloak-cache.xml
jgroups....
0
votes
1
answer
48
views
Sharing Keycloak users database with Spring Boot resource server
I would like to use Keycloak with a spring boot resource server.
I would like to have endpoints which return the users data. For example getting the users email from the Authentication object, and ...
0
votes
0
answers
13
views
Keycloak with Identity Provider(OIDC)
I have 2 questions:
I'm using Keycloak identity provider function and I've integrated Keycloak to UAE Pass app, It's working). Keycloak requests to userinfo URL(sets UAE Pass token to header) and ...
0
votes
0
answers
36
views
Configure Keycloak TLS to use Trusted Platform Module (TPM) private key
I'm trying to configure Keycloak TLS using a self signed certificate, the private key of which is stored in TPM (Trusted Platform Module). So I have the certificate PEM file, but I don't have the ...
0
votes
1
answer
18
views
Keycloak unable to login - removed totp credentials
In keycloak master realm we had 2 credentials for admin user, one is password and another is totp. I have accidentally deleted the totp credentials. Now when I am trying to login after username/...
0
votes
0
answers
16
views
Resource vs Permission while authorizing user to a resource in Keycloak
I am trying to authorize users to a resource in keycloak using resource-based permission.
using this documentation, I can make an API call to keycloak to know whether a particular user is authorized ...
0
votes
0
answers
22
views
Is it possible to run keycloak (15.0.2) in terminal without standalone.sh?
I have downloaded the keycloak 15.0.2 version from its official document: ‘Central Repository: org/keycloak/keycloak-dist-downloads/15.0.2’
and then I open that code on VS Code.
I print some logs in ...
0
votes
0
answers
8
views
Integrating Keycloak with React using OIDC-Client and encountering a 404 error upon login page. What am I missing in the server portal configuration?
oidc-client 404 page not found
i was try to integrate keycloack react using oidc-client library , the code below is my configuration with oidc-client
const settings = {
authority: "http://...
0
votes
0
answers
18
views
Keycloak Refresh Token implementation with ReactJS
Current tech stack: ReactJS, Nginx, SpringBoot, Keycloak.
Earlier in place of nginx, Node+Redis was used to implement refresh token.
Old Implementation: if user is active, before expiry time of 5/10 ...
0
votes
0
answers
22
views
ASP.NET Core MVC : Keycloak error on Signin-oidc
I use keycloak in an ASP.NET Core 7.0 MVC app, but when I go in the login page I get this error:
Exception: OpenIdConnectAuthenticationHandler: message.State is null or empty.
Exception: An error was ...