<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_1_1421501775630_2212" dir="ltr"> Hi,</div><div id="yui_3_16_0_1_1421501775630_2225" dir="ltr"><br></div><div id="yui_3_16_0_1_1421501775630_2226" dir="ltr">I am in the process of setting up a cluster of keycloak instances, all of which are accessible by a single url (fronted by a reverse proxy or an alias). So when a client application communicates with the single url using either SAML or Openid Connect, how do we ensure that all the keycloak instances use the same set of certificates/keys to sign/encrypt the SAML/OpenID Connect response?</div><div id="yui_3_16_0_1_1421501775630_2273" dir="ltr"><br></div><div id="yui_3_16_0_1_1421501775630_2274" dir="ltr">Noticed that we can generate a new set of keys for each realm within Keycloak instance but they are different across different instances. Is there a way of using the same certificate/keys across all the instances?</div><div id="yui_3_16_0_1_1421501775630_2275" dir="ltr"><br></div><div id="yui_3_16_0_1_1421501775630_2276" dir="ltr">Appreciate any input.</div><div id="yui_3_16_0_1_1421501775630_2293" dir="ltr"><br></div><div id="yui_3_16_0_1_1421501775630_2286" dir="ltr">Thanks,</div><div id="yui_3_16_0_1_1421501775630_2297" dir="ltr">Raghu</div></div></body></html>