Hi, I have been playing with keycloak for the last two days, and while it looks beatiful and has all the features (plus many more!) we (think) we're looking for, we're having a hard time getting any client to work, with one exception: the builtin 'account' client. We - setup apache2 reverse proxy so keycloak runs on regular https port - configured Let's Encrypt SSL - added our realm & configured our samba AD, synced users/groups - configured HAProxy for AD DC failover - configured and tested kerberos authentication everything works great, but it's all within the keycloak system. (specifically: the builtin 'accounts' client) We've not had much luck at all making an external product authenticate using keycloak IdP / SAML. We thought an easy client would be perhaps simplesamlphp, or wordpress plugins ("miniOrange SSO using SAML 2.0" and "SAML 2.0 Single Sign-On") but there are no examples / step-by-step guides specific to keycloak that we can find. There is a lot of keycloak-related talk on jboss, war, wildfly, keycloak's client adapters, etc, but to us, these all seem to be more 'advanced usage', rather than using a 'regular' SAML capable client. Or we're beginning to think that perhaps we misunderstand what keycloak can do for us... Hence our request here: Does anyone have a list of simple steps ("provide this, check this, fill in this here, etc, etc") for some well-known external mainstream easily obtainable SAML clients? We would be very grateful :-) _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user

Hi Marek, On 22-11-2016 8:46, Marek Posolda wrote: > Hi, > > did you try our keycloak-examples distribution? You can download it from > the keycloak homepage. Then you can try the existing examples. Probably > those in directories: > - saml > - broker/saml-broker-authentication > > will be most interesting for you. * I downloaded the keycloak-examples (2.4.0.CR1) distr on another machine, and started the server: keycloak-demo-2.4.0.CR1/keycloak/bin/standalone.sh * added admin user and were able to login Wildfly at localhost:9990

In WildFly I see a deployed keycloak-server.war and that's about it. Is this the no-config required demo distribution? I'm not sure how to continue..? I can see the directories saml and broker/saml-broker-authentication in ./examples, but what to do with them?

Apologies for the basic questions.... MJ