Questions tagged [keycloak]

Integrated Single Sign On (SSO) and Identity Manager (IDM) for browser apps and RESTful web services. Built on top of JBoss / Wildfly and complies with OAuth 2.0, Open ID Connect, JSON Web Token (JWT) and SAML 2.0 specifications.

Filter by
Sorted by
Tagged with
0
votes
0answers
12 views

How to you configure Wildfly for remote access when it's running in Kubernetes?

I have Keycloak set up on Kubernetes, which uses Wildfly. If I go into the container, I can do curl -L http://127.0.0.1:8080/auth which works, but as soon as i use a public ip, I can't connect. When ...
1
vote
0answers
114 views

Keycloak login error destination_invalid

I'm currently trying to set up keycloak to provide single sign on to a nextcloud and gitlab instance. All three services are running inside a docker compose network with an nginx server as proxy to ...
1
vote
1answer
27 views

graviteeio - management-rest-api oauth role mappings

Gravitee manager can be configured with keycloak authentication as described here. They state in their documentation, that role mapping could be addressed on their gravitee.yml configuration: security:...
0
votes
0answers
16 views

What is required or need to implement inside microservice which has kafka consumer( B microservice) code to avoid 401 error

I have Microservices called A, B, C, D. A contains Kafka producer code. B contains Kafka consumer code. B consume messages from Kafka consumer and process further and interact with other microservice ...
0
votes
0answers
17 views

Is it possible to trigger API or function calls when a user is created in Azure AD?

We have a handful of Azure AD domains that we are soon to be using as IdPs with a centralizing identity broker. For business and legal reasons we will not be combining these domains, establishing ...
1
vote
0answers
42 views

Unable to add users from Keycloack on FreeIPA via LDAP although Keycloack host has permissions set in FreeIPA

I have the following setup: FreeIPA 4.8.7 via docker (freeipa/freeipa-server:centos-8) Keycloack 12.0.1 The FreeIPA users are in cn=users,cn=accounts,dc=freeipa,dc=example,dc=com Keycloack DN: ...
0
votes
0answers
10 views

Does SSO still works for a user present in 2 differents Realms with Keycloak?

If I have 2 realms in keycloak : REALM1 are going to be connected to LDAP1, LDAP2 and Google open id REALM2 are going to be connected to LDAP1 and ActiveDirectory1 If I have a user in LDAP1 : will I ...
0
votes
1answer
132 views

GLPI appending :80 to CAS Callback URL

Problem: GLPI is appending :80 to the callback URL for CAS authentication using Keycloak. After logging in successfully on Keycloak, user gets redirected to the GLPI URL which containers :80 in the ...
0
votes
1answer
107 views

How to map internal OIDC group to external K8s cluster roles

I have successfully connected my K8s cluster + dashboard to my Keycloak server, now i have asked myself the question: I have followed these instructions here. Furthermore I also made the appropriate ...
0
votes
1answer
120 views

JBPM KIE Server Token Based Authentication

I have successfully installed and configured JBPM 7.40.0 and Keycloak 11.0.0 on the same server instance as per the documentation . I can succesfully do GET http://myserver/kie-server/services/rest/...
0
votes
1answer
62 views

Why does embedding KeyCloak into a another stack using requirements.yaml fail?

I ran into a really weird issue when using https://github.com/codecentric/helm-charts/tree/master/charts/keycloak to set up keycloak on k8s: Using this helmchart and setting it up directly works ...
0
votes
0answers
46 views

GKE RBAC via keycloak

Use RBAC in GKE via https://www.keycloak.org/ - it possible?) -I found a lot of articles on using rbac using keycloak for k8s but for k8s in gke I only found this: https://cloud.google.com/kubernetes-...
2
votes
2answers
495 views

How can I resolve “SAML Providers must reference at least one SAML assertion issuer” message?

I want to setup a SSO solution using Keycloak 10.0.2 as the Identity Provider. The first application I want to setup is AWS. I followed this tutorial to enable Keycloak to sign me in using SAML. I ...
0
votes
0answers
35 views

Accessing firewalled services from a kubernetes the cluster

I am currently setting up a kubernetes cluster that needs to interact with an LDAP server that is in a different network location. Currently all access to that location is mediated via OpenVPN. ...
1
vote
0answers
90 views

Keycloak takes a long time to wake up if unused during a day or more

I installed Keycloak with a docker compose, behind an NGINX reverse proxy. Keycloack is only installed now for testing. When I stop using it for a days or more, next time I have a "Request Time-out" ...
0
votes
0answers
65 views

Can roles be enabled on users of a group in keycloak?

Can we have users added under a certain group and then give few roles to each of these groups in keycloak? For example, if we have a group called 'admin', all users under this group will have read/...
2
votes
1answer
94 views

Invalid keycloak URL error when installing alfresco-dbp with helm in Kubernetes on AWS

I'm currently trying to deploy Alfresco Content Services on AWS following this guide. I got as far as to "Creating File Storage for Alfresco Content Services Community" where I have to create an EFS ...
3
votes
2answers
6k views

KEYCLOAK + MYSQL + DOCKER --> Failed to start

I am trying to start a Keycloak instance which uses a custom mysql database instead of the embedded H2. Since I am planning to use docker, I created a network for Keyclock docker to communicate with ...
2
votes
1answer
2k views

Howto traefik->keycloak gatekeeper->service?

My question is: Specifically, how do I configure traefik to double proxy through keycloak gatekeepr to authenticate my services as outlined below? I know my authentication chain looks like the ...