Hello Trying to configure SSO  for the application on wildfly with keycloak What  contents from web.xml of .war file needs to be configure  in keycloak console ? why we need to take from web.xml file What exactly  are they roles etc . ? Thanks, Vandana _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user

yes  we have those  in web.xml . What exactly needs to be take from web.xml and put in keycloak ? for  single sign on configuration ?We tried to have  roles and username same as in web.xml in keycloak also but it did not work .can you  able to  give us a  scenario in detail ? Thanks, On Sun, Jul 22, 2018 at 9:21 PM Dmitry Telegin <dt(a)acutus.pro&gt; wrote: > Hi Vandana, > > The process of configuring Keycloak Wildfly adapter is described in > detail here, including the example of web.xml: https://www.keycloak > .org/docs/latest/securing_apps/index.html#jboss-eap-wildfly-adapter > > Cheers, > Dmitry Telegin > CTO, Acutus s.r.o. > Keycloak Consulting and Training > > Pod lipami street 339/52, 130 00 Prague 3, Czech Republic > +42 (022) 888-30-71 > E-mail: info(a)acutus.pro > > On Thu, 2018-07-19 at 16:24 -0500, vandana thota wrote: > > Hello > >  > > Trying to configure SSO  for the application on wildfly with > keycloak > > What  contents from web.xml of .war file needs to be > configure  in > > keycloak > > console ? > >  > > why we need to take from web.xml file > >  > > What exactly  are they roles etc . ? > >  > >  > >  > > Thanks, > > Vandana > > _______________________________________________ > > keycloak-user mailing list > > keycloak-user(a)lists.jboss.org > > https://lists.jboss.org/mailman/listinfo/keycloak-user >

From my previous email continuation .We have deployed jenkins.war file

Hello I have choosen to secure via app. So we have below keycloak SAML Adapter keycloak Saml.xml file from installation tab of client of keycloak : You want me to put the line "use-resource-role-mappings": true in this file if yes where exactly ? <keycloak-saml-adapter> <SP entityID="http://nl005164.tst.kohls.com:19015/jenkins" sslPolicy="EXTERNAL" logoutPage="SPECIFY YOUR LOGOUT PAGE!"> <Keys> <Key signing="true"> <PrivateKeyPem> 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 </PrivateKeyPem> <CertificatePem> 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 </CertificatePem> </Key> </Keys> <IDP entityID="idp" signatureAlgorithm="RSA_SHA256" signatureCanonicalizationMethod=" http://www.w3.org/2001/10/xml-exc-c14n#"> <SingleSignOnService signRequest="true" validateResponseSignature="true" validateAssertionSignature="false" requestBinding="POST" bindingUrl=" http://nl005164.tst.kohls.com:19017/auth/realms/Demo-Realm/protocol/saml "/> <SingleLogoutService signRequest="true" signResponse="true" validateRequestSignature="true" validateResponseSignature="true" requestBinding="POST" responseBinding="POST" postBindingUrl=" http://nl005164.tst.kohls.com:19017/auth/realms/Demo-Realm/protocol/saml&... redirectBindingUrl=" http://nl005164.tst.kohls.com:19017/auth/realms/Demo-Realm/protocol/saml "/> </IDP> </SP> </keycloak-saml-adapter> On Mon, Jul 23, 2018 at 8:08 AM Dmitry Telegin <dt(a)acutus.pro&gt; wrote: > Vandana, > > Could you please check your WEB-INF/keycloak.json and add the following > key: > > "use-resource-role-mappings": true > > Then redeploy your application. Does it help? > > Dmitry > > > yes we have those in web.xml . > > > > What exactly needs to be take from web.xml and put in keycloak ? for > > single sign on configuration ?We tried to have roles and username > > same as in web.xml in keycloak also but it did not work .can you > > able to give us a scenario in detail ? > > > > > > > > > > Thanks, > > > > > > On Sun, Jul 22, 2018 at 9:21 PM Dmitry Telegin <dt(a)acutus.pro&gt; wrote: > > > Hi Vandana, > > > > > > The process of configuring Keycloak Wildfly adapter is described in > > > detail here, including the example of web.xml: https://www.keycloak > > > .org/docs/latest/securing_apps/index.html#jboss-eap-wildfly-adapter > > > > > > Cheers, > > > Dmitry Telegin > > > CTO, Acutus s.r.o. > > > Keycloak Consulting and Training > > > > > > Pod lipami street 339/52, 130 00 Prague 3, Czech Republic > > > +42 (022) 888-30-71 > > > E-mail: info(a)acutus.pro > > > > > > On Thu, 2018-07-19 at 16:24 -0500, vandana thota wrote: > > > > Hello > > > > > > > > Trying to configure SSO for the application on wildfly with > > > keycloak > > > > What contents from web.xml of .war file needs to be > > > configure in > > > > keycloak > > > > console ? > > > > > > > > why we need to take from web.xml file > > > > > > > > What exactly are they roles etc . ? > > > > > > > > > > > > > > > > Thanks, > > > > Vandana > > > > _______________________________________________ > > > > keycloak-user mailing list > > > > keycloak-user(a)lists.jboss.org > > > > https://lists.jboss.org/mailman/listinfo/keycloak-user > > > >