Why are you not changing the config in keycloak.json? The way you do it now you may end up with a different URL used to exchange code->token and to refresh tokens.

On 19 May 2016 at 07:30, Subhrajyoti Moitra <subhrajyotim@gmail.com> wrote:

Hello Stian,

Thanks for responding.

Our Keycloak SSO is a single server, but the clients are load balanced.

We just set the redirect_url value to the LB url in the keycloak.login() call, thats it.

It seems to be working without any issues, detected so far.
 :)

Thanks a lot again for looking into this.

Regards,

Subhro.

On Thu, May 19, 2016 at 10:28 AM, Stian Thorgersen <sthorger@redhat.com> wrote:

You need to configure the correct auth-server-url in keycloak.json for your application using keycloak.js. It should be the loadbalancer URL.

On 10 May 2016 at 15:11, Subhrajyoti Moitra <subhrajyotim@gmail.com> wrote:

Hello,

I have a client application, that will be using Keycloak for authentication and authorization.

There are 2 instances of this application running on (lets say) service1 and service2.

These 2 service instance are behind the load balancer. The load balancer has sticky sessions on.

Now a user browses to the loadbalancer url, which in turn serves the service instances, service1 or service2.

Now when the service instance pages are using keycloak.js to verify the login, I dont get the loadbalancer URL as the redirect url value, rather the redirect url is of the actual service instance URL on which the service is hosted.

How do i use Keycloak for loadbalanced services?

Is there some specific setting, or setup of the server?

Please help and guide,

Thanks and cheers,

Subhro.

_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user