[keycloak-user] Can not make SAML2.0 work anyway.
Mai Zi
ornot2008 at yahoo.com
Thu Nov 5 23:22:50 EST 2015
Hi, there,
I am trying version is 1.6.0 keycloak 's brokering. I have imported two realms :saml-broker-realm.json and saml-broker-authentication-realm.json by following the readme in the broker example. It works fine ( except failed logout somehow)
Now I decide to give more try and here is my steps:
1) Create a realm named testsaml and the saml descriptor can be found here: http://localhost:8080/auth/realms/testsaml/protocol/saml/descriptor2) In the saml-broker-authentication-realm, create a new ID provider named saml by importing the URL above: http://localhost:8080/auth/realms/testsaml/protocol/saml/descriptor 3) Download the SP metadata named "keycloak.xml" from the export tab page. 4) Go to the testsaml reaml, and create a client by importing the downloaded "keycloak.xml" 5) open the page : http://localhost:8080/saml-broker-authentication and can see the IDprovider named saml on the left. 6) login with the ID provider but finally get the errors as below:
Context Path:/authServlet Path:
Path Info:/realms/saml-broker-authentication-realm/broker/saml/endpointQuery String:nullStack Trace
java.lang.RuntimeException: request path: /auth/realms/saml-broker-authentication-realm/broker/saml/endpoint
org.keycloak.services.filters.KeycloakSessionServletFilter.doFilter(KeycloakSessionServletFilter.java:75)
......
So what happened for my configuration? I missed something?
T.I.A.
Maizi
.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20151106/7779e38c/attachment.html
More information about the keycloak-user
mailing list