I have tried to use the same setup with Tomcat 7.0.65 with the SAML 2.0 Client Adapter for Tomcat 7 and there the example works. I am able to log in and see my account settings as expected so it is indeed related to Tomcat 8. When I look at the source of the SAML 2.0 Client Adapter for Tomcat 8 I see: public class KeycloakAuthenticatorValve extends AbstractKeycloakAuthenticatorValve { /** * Method called by Tomcat < 8.5.5 */ public boolean authenticate(Request request, HttpServletResponse response) throws IOException { return authenticateInternal(request, response, request.getContext().getLoginConfig()); } /** * Method called by Tomcat >= 8.5.5 */ protected boolean doAuthenticate(Request request, HttpServletResponse response) throws IOException { return this.authenticate(request, response); } So the fix mentioned in https://issues.jboss.org/browse/KEYCLOAK-3669?attachmentViewMode=list Is in it, but is not solving the problem. Can anyone please help? Kevin From: Kevin Cuijpers Sent: Monday, July 24, 2017 4:19 PM To: &#39;keycloak-user(a)lists.jboss.org&#39; <keycloak-user@lists.jboss.org<mailto:keycloak-user@lists.jboss.org>> Subject: org.apache.catalina.authenticator.FormAuthenticator.forwardToLoginPage No login page was defined for FORM authentication in context Hello, I am trying to use the SAML 2.0 Client Adapter for Tomcat 8.5.8. I downloaded keycloak-saml-tomcat8-adapter-dist-3.2.1.Final and installed it in the lib folder of Tomcat. I followed the instructions from app-profile-saml-jee-jsp quickstart to set up the Client. I added following context.xml: <Context path="app"> <WatchedResource>WEB-INF/web.xml</WatchedResource> <WatchedResource>${catalina.base}/conf/web.xml</WatchedResource> <!-- Required for KeyCloak --> <Valve className="org.keycloak.adapters.saml.tomcat.SamlAuthenticatorValve"/> </Context> I copied the files from app-profile-saml-jee-jsp quickstart into a separate project (see attached demo.zip) to make the war. Tomcat starts up correctly and I see the Please login page when I go to http://localhost:8080/app/ When I click on LOGIN I get a 500 error page and following error: org.apache.catalina.authenticator.FormAuthenticator.forwardToLoginPage No login page was defined for FORM authentication in context [/app] I found an old mailing with similar problem: http://lists.jboss.org/pipermail/keycloak-user/2016-November/008380.html pointing to an issue that should have been solved: https://issues.jboss.org/browse/KEYCLOAK-3669?attachmentViewMode=list It is unclear what I need to do to make this simple example work or what needs to be changed to the adapter. Please help. Kevin Cuijpers _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user