[keycloak-user] Using Keycloak Proxy behind a TLS terminating reverse proxy

[Chris Pitman]

Hey everyone,

I'm trying to setup Keycloak Proxy to protect access to a legacy application. Right now we have HTTPD setup as a reverse proxy that terminates TLS and then passes through the request via HTTP to the legacy app. What I want to do is put the Keycloak Proxy in between HTTPD and the app.

I've got it running, but the problem is the URL the proxy passes as the redirect url to keycloak. It is passing an "http://" url, which then doesn't match the configured redirect_urls in Keycloak. I'm assuming it does this since I'm using the HTTP port on the proxy.

How can I get Keycloak Proxy to pass a redirect url with a "https://" scheme, even when not connecting via https to the proxy itself?

Thanks,
Chris Pitman
Architect, Red Hat Consulting