[keycloak-user] Testing SAML Identity Brokering

I'm attempting to set up a test of identity brokering all within a single Keycloak server. I have two realms set up. The "saml-demo" realm is set up with a SAML client. I've exported the SAML definition from that client and imported it into the Identity Brokering for the second realm. Unfortunately, I can't seem to get to the login page of the "saml-demo" when navigating from the second realm. When I click on the identity broker realm link, I'm seeing the following in the logs: keycloak_1 | Caused by: java.security.SignatureException: Signature length not correct: got 256 but was expecting 128 keycloak_1 | at sun.security.rsa.RSASignature.engineVerify(RSASignature.java:189) keycloak_1 | at java.security.Signature$Delegate.engineVerify(Signature.java:1222) keycloak_1 | at java.security.Signature.verify(Signature.java:655) keycloak_1 | at org.apache.jcp.xml.dsig.internal.dom.DOMSignatureMethod.verify(DOMSignatureMethod.java:236) I've turned up logging for all of the Keycloak SAML functionality as well as for java.security. However, I'm struggling to figure out where the mismatch is located in the configuration and not quite sure where to even look. Can anyone offer suggestions on how to go about setting this up or troubleshooting what I'm doing? Thanks, Craig ================================= *Craig Setera* *Chief Technology Officer*