Hi, I can run the preconfigured Customer-portal demo successfully on the single keycloak-demo-2.0.0.Final distribution by importing the testrealm.json file to create the realm. Everything works fine. 

And also I can run this simple login/logout demo by following this instruction to install and setup KeyCloak and Wildfly servers separately: 

https://keycloak.gitbooks.io/getting-started-tutorials/content/v/2.0/topics/overview.html

However, I failed to run the Customer-Portal demo by trying to set up the KeyClaok server and Wildfly server separately. It always gives me this message as I clicked the "Customer Listing" link:

http://localhost:8080/auth/realms/demo/protocol/openid-connect/auth?response_type=code&client_id=customer-portal&redirect_uri=http%3A%2F%2Flocalhost%3A8080%2Fcustomer-portal%2Fcustomers%2Fview.jsp&state=2%2Fe8f347bf-dd8c-4c48-a060-0b01d33476db&login=true

I did exactly the same thing as I tested in the KeyCloak-demo distribution by importing the testrealm.json.

I didn't configure the subsystem section in the Wildfly 10's standalone.xml, since I believe the "keycloak.json" and "web.xml" in the application's WEB-INF directory will do the same thing.  I only had this configured in Wildfly standalone.xml：

<security-domain name="keycloak">

                    <authentication>

                        <login-module code="org.keycloak.adapters.jboss.KeycloakLoginModule" flag="required"/>

                    </authentication>

                </security-domain>

What am I missing? Thank you for your help to this working. By the way, it would be really great to have a full tutorial on how to set up the customer-portal demo  on two separate KeyCloak and Wildfly servers by configuring both Json and subsystem file. 

Thank you for help.