[keycloak-user] Is there a form/basic fallback option for Keycloak SAML adaptor for Tomcat?

ken edward kedward777 at gmail.com
Thu Jun 8 10:36:10 EDT 2017


Hello,

Looking at the Keycloak SAML adaptor for Tomcat I see that it seems to
say the login authentication parameter from the web.xml are "ignored"
(can't say SPNEGO, BASIC). Is there any way to implement FORM based
authentication fallback for the Keycloack SAML Adaptor?

 <login-config>
        <auth-method>BASIC</auth-method>
        <realm-name>this is ignored currently</realm-name>
    </login-config>

https://keycloak.gitbooks.io/documentation/securing_apps/topics/saml/java/tomcat-adapter/tomcat_adapter_per_war_config.html

Can something like this be done:

<login-config>
    <auth-method>SPNEGO</auth-method>
    <realm-name>SPNEGO</realm-name>
        <form-login-config>
            <form-login-page>/login.jsp</form-login-page>
            <form-error-page>/error.jsp</form-error-page>
        </form-login-config>
   </login-config>


Ken


More information about the keycloak-user mailing list