Paul Wright You need to copy the url of the web app, and then login into the keycloak admin console (through MDC bound services view), and add the url as a valid redirect url.