Server Fault

Questions tagged [keycloak]

Ask Question

Integrated Single Sign On (SSO) and Identity Manager (IDM) for browser apps and RESTful web services. Built on top of JBoss / Wildfly and complies with OAuth 2.0, Open ID Connect, JSON Web Token (JWT) and SAML 2.0 specifications.

28 questions with no upvoted or accepted answers
Newest Active Bountied Unanswered
Filter by
Sorted by
Tagged with
3 votes
0 answers
1k views

Keycloak login error destination_invalid

I'm currently trying to set up keycloak to provide single sign on to a nextcloud and gitlab instance. All three services are running inside a docker compose network with an nginx server as proxy to ...
Shelling's user avatar
Shelling
  • 131
2 votes
0 answers
467 views

Can't get Keycloak to add new users/groups to OpenLDAP

I've been banging my head against the wall for two days on this one now. I have setup fresh Keycloak and OpenLDAP instances, and I want to use OpenLDAP as the source of truth for all user data. I want ...
Dominic P's user avatar
Dominic P
  • 497
2 votes
0 answers
431 views

Keycloak takes a long time to wake up if unused during a day or more

I installed Keycloak with a docker compose, behind an NGINX reverse proxy. Keycloack is only installed now for testing. When I stop using it for a days or more, next time I have a "Request Time-out" ...
Tom DARBOUX's user avatar
Tom DARBOUX
  • 121
1 vote
0 answers
875 views

SSO not working between a browser and a Keycloak using an user federation with kerberos integration to a windows AD

I am trying to get SSO working using a browser(Chrome or firefox) and keycloak configured with an user federation AD Domain(kerberos is configured). First I present the overview of what I have and ...
Afonso R.'s user avatar
Afonso R.
  • 11
1 vote
0 answers
1k views

Wrong redirect_uri on keycloak

I am trying to use keycloak to authenticate my service that are provided in a tomcat 8 docker by following https://github.com/keycloak/keycloak-documentation/blob/main/securing_apps/topics/oidc/java/...
Winter's user avatar
Winter
  • 131
1 vote
0 answers
728 views

Keycloak: Difference between Authentication sessions and User Sessions

I was going through the documentation https://www.keycloak.org/docs/latest/server_installation/#cache Here they have described different types of caches. I didn't quite understand the definitions they ...
MrRobot9's user avatar
MrRobot9
  • 123
1 vote
0 answers
316 views

Indirect Group Membership with Keycloak and oauth2-proxy

I'm using oauth2-proxy/oauth2-proxy with Keycloak-oidc provider for authentication for some pods in my Kubernetes cluster. I can specify which groups are allowed to access a resource using the --...
cclloyd's user avatar
cclloyd
  • 613
1 vote
0 answers
271 views

JBoss: How does <stacks> in the standalone-ha.xml work?

This file contains the usual Keycloak server configuration with the addition of WildFly10 High Availability extensions like Infinispan HA cache and JGroups HA communication channels and their ...
MrRobot9's user avatar
MrRobot9
  • 123
1 vote
1 answer
1k views

Keycloak install with helm on GKE with Cloud SQL (external) database

I'm trying to install keycloak on GKE cluster in GCP with external database, i.e. CloudSQL postrges db. I want to use helm to install it, so: helm repo add bitnami https://charts.bitnami.com/bitnami ...
Michał Z's user avatar
Michał Z
  • 11
1 vote
1 answer
966 views

Unable to add users from Keycloack on FreeIPA via LDAP although Keycloack host has permissions set in FreeIPA

I have the following setup: FreeIPA 4.8.7 via docker (freeipa/freeipa-server:centos-8) Keycloack 12.0.1 The FreeIPA users are in cn=users,cn=accounts,dc=freeipa,dc=example,dc=com Keycloack DN: ...
sschueller's user avatar
sschueller
  • 111
0 votes
0 answers
50 views

FreeIPA, Keycloak and Radius with OTP used for Wifi, VPN and Docker registry auth result in logging in hell

we have configured our infrastructure to use FreeIPA for user database, keycloak as SSO auth and Radius as auth proxy. We use everywhere password + OTP policy. We have several apps connected to ...
Broskev's user avatar
Broskev
  • 37
0 votes
0 answers
17 views

OpenStack - Keycloak SSO oidc mapping

I'm trying to set up SSO for OpenStack, through Keycloak, via OpenID. If I use the example mapping from the OpenStack documentation, it works fine. However, I want to have a different setup, and would ...
AlexP's user avatar
AlexP
  • 1
0 votes
0 answers
58 views

Windows11: How do I find out exactly where SAML-WebLogIn on Windows fails after redirect back to Windows?

I managed to enable federated Logins for our Microsoft tenant so that if you login to, say, office.com and enter your username (e.g. "[email protected]") you're then redirected to our Keycloak ...
Rhywden's user avatar
Rhywden
  • 101
0 votes
1 answer
568 views

Keycloak Integration with a Linux Server

I've set up a Keycloak server and I'm working on integrating it with a Linux server to allow users from Keycloak to authenticate into the Linux server using their Keycloak credentials. Ideally, I'd ...
Tisighe Livinstone's user avatar
Tisighe Livinstone
  • 1
0 votes
0 answers
89 views

Configure keycloak admin UI to listen on different port than the IAM services?

Is there a way to configure keycloak admin UI to listen on different port than the IAM services? My primay goal is to restrict access to admin just from dedicated ip addresses, and allow access to ...
g.pickardou's user avatar
g.pickardou
  • 234
0 votes
0 answers
341 views

Getting IDENTITY_PROVIDER_LOGIN_ERROR with keycloak, OAuth authentication with Github, "federatedIdentityModel" is null

I am running KeyCloak as one of the services in a K3s cluster to provide identity management for another service on the cluster, both of which is behind Ngnix. After deleting Github(the initial ...
Lois's user avatar
Lois
  • 1
0 votes
0 answers
93 views

Apache Ranger vs Keycloak for authorization

Iam new to both Apache Ranger and Keycloak. When I was doing my research I understood that, Apache ranger and Keycloak both has the authoirzation capabilites, added keycloak has authentication ...
pacman's user avatar
pacman
  • 101
0 votes
0 answers
279 views

Keycloak is automatically changing certificate

I'm using Keycloak Quay 22.0.3 with docker-compose behind a Nginx reverse proxy but I have some troubles due an automatic replace of my certificate generated with certbot. My certificate generated ...
Alessio Raddi's user avatar
Alessio Raddi
  • 101
0 votes
0 answers
584 views

Multiple Kerberos Providers in Keycloak

I have a Keycloak with 2 different LDAP Providers which include Kerberos Authentication. Provider A is on first priority, provider B on second priority. Both provider settings provide their different ...
Lithilion's user avatar
Lithilion
  • 131
0 votes
1 answer
425 views

Keycloak Docker fails to start due to "Negative Delay." Error

Running a keycloak container (21.0 - 21.1.1) on a Debian 11 Bullseye recently stopped working after host restart (MariaDB didn't start up, leading to keycloak also exiting. When the issue was noticed ...
Simon's user avatar
Simon
  • 101
0 votes
0 answers
629 views

How to scrape Prometheus secured with OAuth2-proxy and Keycloak

I have 2 prometheuses, both are with forward-auth via the oauth2-proxy, which have the same client credentials in a single keycloak. I would like one prometheus to federate the other one. This is my ...
simonszu's user avatar
simonszu
  • 373
0 votes
1 answer
583 views

Can I use keycloak as an Idp for kibana installed using the ElasticSearch Operator in kubernetes?

I have setup a kubernetes cluster in a private network and I'm using a gateway machine for accessing the cluster. In the kubernetes cluster I have installed the elasticsearch operator and through that ...
user2835131's user avatar
user2835131
  • 1
0 votes
0 answers
641 views

Upgrade to KeyCloak 18 fails

I have a KeyCloak 17.0.1 that is apparently working without issues on my server, configured to use MariaDB. I say "apparently" because, as of today, it's not in production yet, albeit it ...
Lucio Crusca's user avatar
Lucio Crusca
  • 250
0 votes
0 answers
4k views

Conteinerized Keycloak behind Nginx reverse proxy requests localhost

Working setup I have a configuration of external VPS with public IP that has Nginx reverse proxy (A) internal server with Nginx (B) standalone application (not containerized) Keycloak 17.0.1 Which ...
hrust's user avatar
hrust
  • 101
0 votes
0 answers
2k views

next-auth ECONNREFUSED 127.0.0.1:80

I am using Next-auth with keycloak and docker-compose and I get this error: [next-auth][error][GET_AUTHORIZATION_URL_ERROR] arcade-iori | https://next-auth.js.org/errors#...
Crisgarlez's user avatar
Crisgarlez
  • 1
0 votes
1 answer
867 views

Unable to use service account to get userinfo for Keycloak 12.0.4

I am running keycloak version 12.0.4. Previously when I was running version 11.0.2. I am able to use my service account and call the endpoint {{KEYCLOAK_URL}}/auth/realms/{{REALM}}/protocol/openid-...
shadow's user avatar
shadow
  • 101
0 votes
1 answer
924 views

GLPI appending :80 to CAS Callback URL

Problem: GLPI is appending :80 to the callback URL for CAS authentication using Keycloak. After logging in successfully on Keycloak, user gets redirected to the GLPI URL which containers :80 in the ...
retr0's user avatar
retr0
  • 119
0 votes
1 answer
538 views

JBPM KIE Server Token Based Authentication

I have successfully installed and configured JBPM 7.40.0 and Keycloak 11.0.0 on the same server instance as per the documentation . I can succesfully do GET http://myserver/kie-server/services/rest/...
Khetho Mtembo's user avatar
Khetho Mtembo
  • 101