Questions tagged [keycloak-gatekeeper]

Keycloak is an Open Source Identity and Access Management solution for modern Applications and Services. Gatekeeper is an application for use with OpenID Connect (OIDC) that supports both access tokens in a browser cookie or bearer tokens. Please use this tag for asking question regarding Keycloak Gatekeeper here. For more details please see documentation https://www.keycloak.org/docs/latest/securing_apps/index.html#_keycloak_generic_adapter

Links:

94 questions
2
votes
1 answer

Keycloak-Gatekeeper does not populate roles or groups when authenticating against external OIDC provider

I'm trying to set up keycloak-gatekeeper as a reverse-proxy in front of a docker container in order to provide authentication and authorization against the container. I am using FusionAuth as the OIDC compatible identity provider, and have managed…
whiskerc
  • 41
  • 3
2
votes
1 answer

Keycloak-gatekeeper cannot decode "state" due to "illegal base64 data"

I am getting this error from keycloak-gatekeeper when trying to access protected resources unable to decode the state parameter {"state": "8d07f10b-d096-4241-8a42-9f169de11352", "error": "illegal base64 data at input byte 8"} Here is my…
arkadiy kraportov
  • 3,679
  • 4
  • 33
  • 42
2
votes
1 answer

Zabbix HTTP authentication with Keycloak-proxy

I'm try to integrate Zabbix UI with Keycloak SSO, using keycloak-proxy. My setup is the following: Nginx is the entry point: it handles the "virtual host", forwarding the requests to keycloak-proxy. Keyclock-proxy is configured with client_id,…
1
vote
1 answer

Keycloak Admin UI 21.0.1

I am using Embedded keycloak v20.0.5.It was running fine until I upgraded it to 21.0.1. Following this post (https://www.baeldung.com/keycloak-embedded-in-spring-boot-app). When i click on User or group its giving me this error b.map is not a…
1
vote
1 answer

Keycloak is Ignoring --db-url Option

I'm trying to integrate my Keycloak server with Postgres, and ran into an odd problem. When starting my keycloak server with the provided command on Ubuntu: ./kc.sh start-dev --http-port ${PORT} --db-url=jdbc:postgres://myurl.com/database…
1
vote
0 answers

Keycloak: Null Pointer Exception

I have upgraded the keycloak version from 16.1.1 to 17.0.0. On login page, I started getting following exception. ERROR [org.keycloak.services.error.KeycloakErrorHandler] (executor-thread-0) Uncaught server error: java.lang.NullPointerException at…
1
vote
0 answers

Keycloak login page reload issue. /auth/realms/master/protocol/openid-connect/3p-cookies/step1.html 404 error

Keycloak login page is reloading continuously automatically. After inspecting networking tab, I came to know that an html page(/auth/realms/master/protocol/openid-connect/3p-cookies/step1.html) is giving 404 in response. I am running…
1
vote
1 answer

How to connect Drupal with Keycloak 18 for user creation

I am trying to connect drupal with keycloak for login. I have added client id, client secret and Keycloak realm , getting from keycloak server. Using modules - https://www.drupal.org/project/keycloak Link -…
1
vote
0 answers

Keycloak http://localhost:8080/auth unable to acess

I am trying to implement keycloak in Angular. So I have downloaded the 'keycloak-12.0.2.[zip|tar.gz]' file. I have ran the command C:\Users\XXXX\XXXXX\keycloak-12.0.2\bin> standalone.bat in cmd. But when I try to access the keycloak admin login…
Karan
  • 11
  • 3
1
vote
0 answers

Not able to access admin console of keycloak

Problem - Not able to access admin console of keycloak Environment: Kubernetes with istio proxy (Basically Reverse Proxy Environment) keycloak running on http and ssl is terminated at istio gateway Please help us to solve this issue.
1
vote
2 answers

How to handle transactions between multiple operations in keycloak using the java keycloak admin library

I want to achieve transaction functionality in keycloak. I am creating a user then a role and associating that role with the user. I want all of these operations in a single transaction. Here is my code snippet: Keycloak keyClk =…
1
vote
0 answers

Admin url console not available when running keycloak slave with --backup option

I am running keycloak in domain master-slave configuration. In order to have dc backup in case master goes down i configured in such a way that am able to connect to connect to domain controller through jboss cli using the command when the master…
1
vote
1 answer

keycloak/louketo gatekeeper -- doesn't automatically redirect to keycloak login

I am setting up gatekeeper/louketo as a reverse proxy for a browser app. I have the proxy deployed as a sidecar in a kubernetes pod, with keycloak elsewhere in the same cluster (but accessed by a public URL). Gatekeeper is behind an nginx ingress,…
shaunc
  • 5,317
  • 4
  • 43
  • 58
1
vote
0 answers

keycloak flow to check user email against IDP and take them to that IDP

We have an app which has users in the keycloak database or in Azure Active Directory, the Azure AD is federated as an Open ID Connect IDP. This all works fine but the issue is it requires our users to choose the logging in via Keycloak or Azure AD.…
1
vote
0 answers

Keycloak Gatekeeper 7.0.0 multiple client Id skip-client-id option

In older versions of Keycloak Gatekeeper, there was the option --skip-client-id skip the check on the client token (default: false) I am using Keycloak Gatekeeper 7.0.0, where the option has been removed. My problem is,…
Olli
  • 81
  • 3