May 2018 - keycloak-user - Jboss List Archives

by triton oidc

Hi, I saw a feature for KC to handle multiple audiences. https://issues.jboss.org/browse/KEYCLOAK-5791 I'd like to test this feature in my POC. I saw that i can use ScriptBasedOIDCProtocolMapper but didn't found any clear way to do it. Currently when i ask for a code the first query looks like : https://imyserver:9443/auth/realms/GreenAirlines/protocol/openid-connect/... email profile By default the audience equals the clientID Is there a parameter that i can add in the query to ask for an additional audience ? If the documentation was somewhere and i didn't found it, i'm really sorry Thanks for any tips Amaury

6 years, 7 months

2
1
0 / 0

Tomcat SAML Keycloak adapter

by Leonid Rozenblyum

Hello! Can Tomcat SAML keycloak adapter be used to connect to a 3'd party not-keycloak Idp or it has something deeply keycloak-dependent?

6 years, 7 months

1
0
0 / 0

Keycloak identity brokering and fallback scenario

by Leonid Rozenblyum

Suppose we use some 3'd party SAML identity provider and keycloak as the identity broker. Can keycloak be used for a fallback scenario when the 3'd party is down? E.g. to be able to authenticate a user via keycloak-stored credentials? Does keycloak support user entering a password for this locally 'cached' account?

6 years, 7 months

1
0
0 / 0

Tomcat SAML Client adapter and infinite redirect

by Leonid Rozenblyum

Hello everybody. I'm trying to set up Tomcat <-> Keycloak SAML integration. I've got stuck with the infinite redirect issue: after successful authentication I'm returned back to Tomcat Web app (to its protected resource) and then redirected back to keycloak with message YOU ARE ALREADY LOGGED IN. Keycloak 3.4.3 Tomcat 8 The problem is practically the same as described: https://stackoverflow.com/questions/43452853/unable-to-redirect-to-my-tom... The problem is reproduced when I try to load http://localhost:8080/lr/protected (the web application is attached). Thanks for every advice!

6 years, 7 months

3
6
0 / 0

Tomcat SAML keycloak adapater and dynamic redirect URLs

by Leonid Rozenblyum

Hello! I'm using Tomcat SAML keycloak adapter in Tomcat8. Is it possible to redirect back to the application after authentication to the URL depending on the initiator of authentication? So suppose the user loaded the application via: <domain>/<base>/ then after authentication it would be nice to come back to the same <domain>/<base> If the user loaded the app via <IP>/<base> it would be nice to come back here after logging-in in keycloak. Can we somehow control that? It looks like Master SAML Processing URL supports just absolute URLs. Thanks.

6 years, 7 months

1
0
0 / 0

How to get user details

by valsaraj pv

Hi, User redirected to Keyclock & after successful login user redirected back to application. Now there is no user information stored on application side. Earlier it was in LDAP & we fetch user details from LDAP. Now how to get user details in Keyclock based login scenario? Please share if any useful links. Thanks, Valsaraj Viswanathan

6 years, 7 months

2
7
0 / 0

Keycloak - Multi/2FA Factor - OTP - QR Code - Custom Login Screen - Rest API

by Ankur Singhal

Hi All, <https://stackoverflow.com/questions/50319327/keycloak-multi-2fa-factor-ot...> I have *my own Login page where user enters username/password.* This username/password are used to login through Keycloak Rest API. http://localhost:8080/auth/realms/Demo/protocol/openid-connect/token input - {username,password,grant_type,client_secret,client_id} And in response i get access token. Now i wish to enable Authenticator (Google Authenticator). I have enabled it from backend. Now if user wishes to login thorugh my application, my login page i need to get below details. 1.) Somehow i need to include QR Code that appears on keycloak login page post username/password validation to show on my login screen for the first time login once user enter username/password. So do we have any API which return Keycloak QR code image in response. 2.) Subsequent login i will have OTP field, so need a REST api to pass OTP along with username/password. Please help with REST API if keycloak has any. Integrating through Javascript. Similar flow as described in use case 1 here <http://lists.jboss.org/pipermail/keycloak-user/2018-February/013254.html> Just want to use keycloak as a database, doing all operation for me, input will be my screen. I do want redirection of URL's while login in and yet should be standalone deployed. https://stackoverflow.com/questions/50319327/keycloak-multi-2fa-factor-ot... Thanks Ankur

6 years, 7 months

1
2
0 / 0

NoClassDefFoundError: org/keycloak/KeycloakPrincipal

by valsaraj pv

Hi, I am getting following exception while deploying ear in WildFly 10. Apapter is installed so no jars included in ear & no dependencies set. > Caused by: java.lang.NoClassDefFoundError: org/keycloak/KeycloakPrincipal > > Caused by: java.lang.ClassNotFoundException: >> org.keycloak.KeycloakPrincipal from [Module >> \"deployment.app.ear.appEJB.jar:main\" from Service Module Loader]"}, > > "WFLYCTL0412: Required services that are not installed:" => [ > > "jboss.undertow.deployment.default-server.default-host./App", > > >> "org.camunda.bpm.platform.process-application-module.\"deployment.app.ear.appWEB.war:main\".NO_VIEW" > > ] > > > Please let me know if U need to include core jar or set the subsystem dependencies. I saw in one comment that there is no need to set them explicitly. Please advise. Thanks, Valsaraj Viswanathan

6 years, 7 months

2
4
0 / 0

magic link or one-time access to the application without login in Keycloak 3.x

by Sachin Rastogi

Hi all, We are using Keycloak 3.4.3. Is magic link or one-time access to the application without login screen possible? I notice that magic link was available in previous KC 1x or 2.x versions. Please advise. Regards, SR

6 years, 7 months

2
5
0 / 0

Mixed Content - endpoint over a secure connection, but contains a form that targets an insecure endpoint

by Sachin Rastogi

Hi all, We are using Keycloak 3.4.3 and getting following warning when accessing Keycloak Account Management page. Realm "TestRealm" has Require SSL "external requests". Mixed Content: The page at ' https://qsso.ourportal.com/auth/realms/TestRealm/account' was loaded over a secure connection, but contains a form that targets an insecure endpoint ' http://qsso.ourportal.com/auth/realms/TestRealm/account/'. This endpoint should be made available over a secure connection. We have a issue which I believe is due to endpoints exposed over non SSL port. Hence, curious, how can configure Keycloak to use secure endpoint. Please advise. Regards, SR

6 years, 7 months

1
0
0 / 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

keycloak-user May 2018