[keycloak-user] org.apache.catalina.authenticator.FormAuthenticator.forwardToLoginPage No login page was defined for FORM authentication in context

[Kevin Cuijpers]

Hello,

I am trying to use the SAML 2.0 Client Adapter for Tomcat 8.5.8. I downloaded keycloak-saml-tomcat8-adapter-dist-3.2.1.Final and installed it in the lib folder of Tomcat.

I followed the instructions from app-profile-saml-jee-jsp quickstart to set up the Client.

I added following context.xml:
<Context path="app">
    <WatchedResource>WEB-INF/web.xml</WatchedResource>
    <WatchedResource>${catalina.base}/conf/web.xml</WatchedResource>

    <!-- Required for KeyCloak -->
    <Valve className="org.keycloak.adapters.saml.tomcat.SamlAuthenticatorValve"/>
</Context>

I copied the files from app-profile-saml-jee-jsp quickstart into a separate project (see attached demo.zip) to make the war.

Tomcat starts up correctly and I see the Please login page when I go to http://localhost:8080/app/

When I click on LOGIN I get a 500 error page and following error:
org.apache.catalina.authenticator.FormAuthenticator.forwardToLoginPage No login page was defined for FORM authentication in context [/app]

I found an old mailing with similar problem:
http://lists.jboss.org/pipermail/keycloak-user/2016-November/008380.html

pointing to an issue that should have been solved:
https://issues.jboss.org/browse/KEYCLOAK-3669?attachmentViewMode=list

It is unclear what I need to do to make this simple example work or what needs to be changed to the adapter.

Please help.

Kevin Cuijpers