You need to configure the correct auth-server-url in keycloak.json for your application using keycloak.js. It should be the loadbalancer URL. On 10 May 2016 at 15:11, Subhrajyoti Moitra <subhrajyotim(a)gmail.com&gt; wrote: > Hello, > I have a client application, that will be using Keycloak for > authentication and authorization. > There are 2 instances of this application running on (lets say) service1 > and service2. > > These 2 service instance are behind the load balancer. The load balancer > has sticky sessions on. > > Now a user browses to the loadbalancer url, which in turn serves the > service instances, service1 or service2. > Now when the service instance pages are using keycloak.js to verify the > login, I dont get the loadbalancer URL as the redirect url value, rather > the redirect url is of the actual service instance URL on which the service > is hosted. > > How do i use Keycloak for loadbalanced services? > > Is there some specific setting, or setup of the server? > > Please help and guide, > Thanks and cheers, > Subhro. > > _______________________________________________ > keycloak-user mailing list > keycloak-user(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-user >

Why are you not changing the config in keycloak.json? The way you do it now you may end up with a different URL used to exchange code->token and to refresh tokens. On 19 May 2016 at 07:30, Subhrajyoti Moitra <subhrajyotim(a)gmail.com&gt; wrote: > Hello Stian, > Thanks for responding. > Our Keycloak SSO is a single server, but the clients are load balanced. > We just set the redirect_url value to the LB url in the keycloak.login() > call, thats it. > It seems to be working without any issues, detected so far. > :) > > Thanks a lot again for looking into this. > Regards, > Subhro. > > > > On Thu, May 19, 2016 at 10:28 AM, Stian Thorgersen <sthorger(a)redhat.com&gt; > wrote: > >> You need to configure the correct auth-server-url in keycloak.json for >> your application using keycloak.js. It should be the loadbalancer URL. >> >> On 10 May 2016 at 15:11, Subhrajyoti Moitra <subhrajyotim(a)gmail.com&gt; >> wrote: >> >>> Hello, >>> I have a client application, that will be using Keycloak for >>> authentication and authorization. >>> There are 2 instances of this application running on (lets say) >>> service1 and service2. >>> >>> These 2 service instance are behind the load balancer. The load >>> balancer has sticky sessions on. >>> >>> Now a user browses to the loadbalancer url, which in turn serves the >>> service instances, service1 or service2. >>> Now when the service instance pages are using keycloak.js to verify the >>> login, I dont get the loadbalancer URL as the redirect url value, rather >>> the redirect url is of the actual service instance URL on which the service >>> is hosted. >>> >>> How do i use Keycloak for loadbalanced services? >>> >>> Is there some specific setting, or setup of the server? >>> >>> Please help and guide, >>> Thanks and cheers, >>> Subhro. >>> >>> _______________________________________________ >>> keycloak-user mailing list >>> keycloak-user(a)lists.jboss.org >>> https://lists.jboss.org/mailman/listinfo/keycloak-user >>> >> >> >