Hi,      Can anybody help me on this ?        Not sure why the post format  shown in forum is in a mess, so I attach the context as a text file .     T.I.A. ----- Forwarded Message ----- From: Mai Zi <ornot2008(a)yahoo.com&gt; To: &quot;keycloak-user(a)lists.jboss.org&quot; <keycloak-user(a)lists.jboss.org&gt; Sent: Friday, November 6, 2015 12:22 PM Subject: Can not make SAML2.0 work anyway. Hi,  there,    I am trying   version is 1.6.0  keycloak 's brokering.  I have imported  two realms :saml-broker-realm.json and saml-broker-authentication-realm.json    by following the readme in the broker example.  It works fine ( except failed logout somehow)   Now I decide to give more try and here is my steps: 1)  Create a realm named testsaml and the saml descriptor can be found here:    http://localhost:8080/auth/realms/testsaml/protocol/saml/descriptor2)  In the    saml-broker-authentication-realm,  create a new ID provider named saml  by importing the URL above: http://localhost:8080/auth/realms/testsaml/protocol/saml/descriptor 3)  Download  the SP metadata named "keycloak.xml" from the export tab page.  4)  Go to the testsaml reaml, and create a client by importing the downloaded "keycloak.xml"  5)  open the page :   http://localhost:8080/saml-broker-authentication and can see  the IDprovider named saml  on the left. 6)   login with the ID provider but finally get the errors as below: Context Path:/authServlet Path: Path Info:/realms/saml-broker-authentication-realm/broker/saml/endpointQuery String:nullStack Trace java.lang.RuntimeException: request path: /auth/realms/saml-broker-authentication-realm/broker/saml/endpoint org.keycloak.services.filters.KeycloakSessionServletFilter.doFilter(KeycloakSessionServletFilter.java:75) ...... So what happened for my configuration?   I missed something? T.I.A. Maizi .