Hi, could you try to install the "legacy" (non-elytron) adapter and check if it works? I think that it is the file adapter-install-offline.cli instead of adapter-elytron-install-offline.cli (not 100% sure). If that helps, then feel free to create JIRA with your use-case. Marek On 28/01/2019 21:07, Zahradnik, Milan wrote: Hi, I am new on this forum so please forgive me any mistakes I make. We have a strange issue with keycloak and wildfly Elytron. We use wildfly 15.0.0. After installing keycloak (4.8.3) adapter for wildfly 10 and more (adapter-elytron-install-offline.cli) we always get exception "Not allowed exception" when we send request to our endpoint (stateless EJB bean). In our access token we have all necessary roles which are then applied on endpoint in @RolesAllowed("rest"). Also not working when we use @SecurityDomain("keycloak") with EJB. The strange is when we install keycloak adapter for older wildfly versions (adapter-install-offline.cli) everything works as expected. The same issue is herehttp://lists.jboss.org/pipermail/keycloak-user/2018-August/015297.html Does anybody of you any idea what could be an issue here? Thanks for any help Milan Zahradnik _______________________________________________ keycloak-user mailing listkeycloak-user@lists.jboss.orghttps://lists.jboss.org/mailman/listinfo/keycloak-user