Hi,

Can anybody help me on this ?

Not sure why the post format shown in forum is in a mess, so I attach the context as a text file .

T.I.A.

----- Forwarded Message -----
From: Mai Zi <ornot2008@yahoo.com>
To: "keycloak-user@lists.jboss.org" <keycloak-user@lists.jboss.org>
Sent: Friday, November 6, 2015 12:22 PM
Subject: Can not make SAML2.0 work anyway.

Hi, there,

I am trying version is 1.6.0 keycloak 's brokering. I have imported two realms :saml-broker-realm.json and saml-broker-authentication-realm.json

by following the readme in the broker example. It works fine ( except failed logout somehow)

Now I decide to give more try and here is my steps:

1) Create a realm named testsaml and the saml descriptor can be found here: http://localhost:8080/auth/realms/testsaml/protocol/saml/descriptor

2) In the saml-broker-authentication-realm, create a new ID provider named saml by importing the URL above: http://localhost:8080/auth/realms/testsaml/protocol/saml/descriptor

3) Download the SP metadata named "keycloak.xml" from the export tab page.

4) Go to the testsaml reaml, and create a client by importing the downloaded "keycloak.xml"

5) open the page : http://localhost:8080/saml-broker-authentication and can see the IDprovider named saml on the left.

6) login with the ID provider but finally get the errors as below:

Context Path:

/auth

Servlet Path:

Path Info:

/realms/saml-broker-authentication-realm/broker/saml/endpoint

Query String:

null

Stack Trace
java.lang.RuntimeException: request path: /auth/realms/saml-broker-authentication-realm/broker/saml/endpoint
org.keycloak.services.filters.KeycloakSessionServletFilter.doFilter(KeycloakSessionServletFilter.java:75)

......

So what happened for my configuration? I missed something?

T.I.A.

Maizi