8,011 questions
- Bountied 0
- Unanswered
- Frequent
- Score
- Trending
- Week
- Month
- Unanswered (my tags)
1
vote
1
answer
63
views
Trying to integrate Keycloak with Axelor 8 but can't get button "Log in with Keycloak"
I am trying to integrate Keycloak (OIDC) with Axelor, but I am stuck and would like to understand whether this is a configuration issue, a missing module, or a version incompatibility.
My Environment ...
0
votes
0
answers
27
views
CIBA Authentication Flow – 403 invalid_token Error
I am implementing the No CONSENT mode for CIBA. After invoking the endpoint:
http://\<host\>/realms/x/protocol/openid-connect/ext/ciba/auth
I successfully received an auth_req_id.
Next, I am ...
0
votes
1
answer
28
views
Keycloak on subpath behind reverse proxy
After something else fundamentally broke, we updated from keycloak 11 (yes, I know) to Keycloak 26. However, we can’t seem to get the proxy config right. We’re using X-Forwarded-For-Headers everywhere,...
2
votes
1
answer
54
views
Keycloak doesn't allow creating resources with the same ID in different realms
I use Keycloak server 26.2.0. I have several realms (for multitenancy). Each realm has a client with the same name, which has authorization enabled. I'm trying to create resources using the Keycloak ...
1
vote
1
answer
76
views
Spring Boot OAuth2 Client with Keycloak in Docker redirects browser to internal hostname [duplicate]
I am running Keycloak and all my Spring Boot microservices (including a BFF) inside Docker.
The BFF service (port: 8989) is configured as an OAuth2 client (confidential client) using Authorization ...
0
votes
0
answers
107
views
Behavior change after upgrade from Keycloak 17 to 26.4.5 – multiple tabs and user session issues
After upgrading from Keycloak 17 to Keycloak 26.4.5, we have observed a change in session behavior across multiple tabs and sites. Below is the scenario:
Keycloak 17 Behavior
If I log in as User 1 in ...
Advice
0
votes
0
replies
48
views
Get keycloak token with curl and 2fa
I have more totp apps registered for my kc account to login with totp. Private and work smartphone and a passwordstore... just to be able, to remove totp for a phone, in case it get lost.
And i want ...
1
vote
1
answer
124
views
Failed to create config file: /.keycloak/kcadm.config in keycloak docker container
I've below docker compose file which starts the keycloack service -
version: '3.4'
services:
keycloak-postgres:
image: postgres:13
environment:
- POSTGRES_DB=keycloak
- ...
Advice
0
votes
0
replies
66
views
Experiences migrating from Open-Source Keycloak to Red Hat’s build (pros, cons, regrets?)
We’re considering switching from open-source Keycloak to the Red Hat build of Keycloak, primarily to reduce the security/regression testing burden associated with new versions. I’ve read the ...
0
votes
1
answer
67
views
KeyCloke CIBA implementation for NO Consent Flow
I am working on developing solution to implement CIBA to protect a custom API. KeyCloke version is 26.X.X
Requirement is to provide no consent for the CIBA flow. User should be able to get token ...
1
vote
0
answers
48
views
Keycloak Credential Reset and RootAuthenticationSessionRemoval
When creating a new user in a Keycloak realm (I am on version 26.3.2), we use the Credential Reset function in the users Credentials tab to send the user a message with a required action "Update ...
-1
votes
1
answer
62
views
Is it "standard" to use Keycloak SSO tokens to fetch Google/Microsoft calendar data? [closed]
I’m using Keycloak as my identity provider and I have enabled identity brokering with Google and Microsoft (Azure AD).
My current flow:
User logs in via Google or Microsoft through Keycloak SSO.
In ...
Advice
0
votes
7
replies
114
views
What's the use of ID token in OIDC?
I only worked with Keycloak so far. After a successful login, I got access token & ID token. Both can be verified with the certs in .well-known path.
I understand that I can send access token to ...
-3
votes
1
answer
50
views
Keycloak Admin Console: I need to disable edit access to Realm Settings while enabling edit access to User Federation
As a master realm admin, I need to limit a user's access such that they don't have access to the Realm Settings tab, but have edit access to the User Federation tab. Both the realm-admin and manage-...
0
votes
1
answer
37
views
KeyCloak Server LOGIN_ERROR when accessing server on Windows
Running KeyCloak 26.4.2 or 26.4.5 and jdk-21 on Windows 10.
// script to generate and install certificate
function Generate-Certificate{
$keycloakInstallationDir = "C:\PathToCertificate&...