Hi Bruno,

    I have already taken this steps as part of the previous troubleshooting.  The problem is that adapter is keycloak expect a state cookie which is not present in the header. This is either because of the some application configuration in KeyCloak for UPS-JS or because something is not getting set in UPS code based.  Below is the debug trace, hope this helps.  At this point I am fully authenticate and am waiting for UPS Angular App to load.

2014-11-17 15:03:11,360 DEBUG [org.keycloak.adapters.PreAuthActionsHandler] (default task-26) adminRequest https://XXX.XXX.XXX.XXX:8443/ag-push/index.html?code=HQUlGctT_-SJ3szGiVkD_4Aa1wcGQJNzYe-0imJJidw.5ee890c6-1c83-4f36-9344-a1c432a2c195&state=500e4da9-4e8b-4fe7-b5b2-3bd0faa86928
2014-11-17 15:03:11,360 DEBUG [org.keycloak.adapters.PreAuthActionsHandler] (default task-26) adminRequest https://XXX.XXX.XXX.XXX:8443/ag-push/index.html?code=HQUlGctT_-SJ3szGiVkD_4Aa1wcGQJNzYe-0imJJidw.5ee890c6-1c83-4f36-9344-a1c432a2c195&state=500e4da9-4e8b-4fe7-b5b2-3bd0faa86928
2014-11-17 15:03:11,360 DEBUG [org.keycloak.adapters.RequestAuthenticator] (default task-26) session was null, returning null
2014-11-17 15:03:11,360 DEBUG [org.keycloak.adapters.OAuthRequestAuthenticator] (default task-26) there was a code, resolving
2014-11-17 15:03:11,360 DEBUG [org.keycloak.adapters.OAuthRequestAuthenticator] (default task-26) checking state cookie for after code
2014-11-17 15:03:11,360 WARN  [org.keycloak.adapters.OAuthRequestAuthenticator] (default task-26) No state cookie



Regards,
--
Pratik Parikh
- Mantra - Keep It Simple and Straightforward