Questions tagged [keycloak-services]

608 questions
16
votes
4 answers

Keycloak/OIDC : retrieve user groups attributes

I've extracted a user's groups information from the OIDC endpoint of Keycloak, but they don't come with the group ATTRIBUTES I defined (see Attributes tab into the group form, near Settings). Is there a claim to add to my request? I'm using a…
Thomas Escolan
  • 1,298
  • 1
  • 10
  • 28
16
votes
2 answers

Why is 'id' called 'sub' in keycloak?

Im looking at the new Keycloak Beta 4 API. When i get the users account information, what is referred to as 'id' in the web ui comes back as 'sub' in the account object. { sub: '25a37fd0-d10e-40ca-af6c-821f20e01be8', name: 'Barrack Obama', …
Jack Murphy
  • 2,952
  • 1
  • 30
  • 49
16
votes
4 answers

cannot create user in the keycloak. Getting 403 status

I am trying to access the create a user in the keycloak programmatically. But I am getting 403 as a status code. I am following the below link. https://technology.first8.nl/programmatically-adding-users-in-keycloak/ Can anyone help me? Thanks In…
Programmer
  • 657
  • 4
  • 9
  • 21
15
votes
3 answers

Can we create users in Keycloak by sending a json array containing more than 2 user info?

I was able to create user in Keycloak by posting a json containing only 1 user using postman. http://localhost:8080/auth/admin/realms/master/users But when i tried to create more than 1 user by passing a json array of more than 1 record i am …
Midhun Gopinath
  • 291
  • 2
  • 4
  • 13
15
votes
1 answer

Keycloak: How to auto redirect Keycloak user to OKTA SSO page instead of clicking on button?

I have followed the guide https://ultimatesecurity.pro/post/okta-saml/ , to configure OKTA Saml with keycloak. After this configuration, I see Okta/saml login button on login page, clicking on which, the user is redirected to Okta login/SSO. Now,…
tryingToLearn
  • 10,691
  • 12
  • 80
  • 114
14
votes
3 answers

Keycloak SSL setup using docker image

I am trying to deploy keycloak using docker image (https://hub.docker.com/r/jboss/keycloak/ version 4.5.0-Final) and facing an issue with setting up SSL. According to the docs Keycloak image allows you to specify both a private key and a…
Vsoma
  • 595
  • 1
  • 5
  • 17
13
votes
7 answers

Keycloak Invalid token issuer

I have a mobile app(react-native), a resource service(spring boot) and Keycloak Authenticatioin Service(Auth-Service). Client makes authentication directly with Auth-Service and gets the access token. When I do a request to the resource service, the…
13
votes
8 answers

Keycloak Admin Rest API unknown_error for update user API

I am trying to add a custom attribute to a user using Admin Rest API. When i try with default master realm, its working fine. But when i try it with another realm that i created, it yields "unknown_error". I have attached the screenshot of request…
Muhammad Umair
  • 242
  • 1
  • 3
  • 7
13
votes
1 answer

How to export realm file into keycloak docker container?

I'm trying to export a realm file into keycloak docker container, I'm not able to do that because the server is runing when I execute this command: bin/standalone.sh -Dkeycloak.migration.action=export -Dkeycloak.migration.provider=dir…
Slim
  • 5,527
  • 13
  • 45
  • 81
13
votes
2 answers

How to get current user profile picture with Keycloak?

I am trying to get user profile picture and other information those who logged-in using Identity provider like Google or Facebook in my AngularJs application using Keycloak authentication.
avi
  • 212
  • 1
  • 5
  • 15
12
votes
2 answers

How to set a default group on an Identity Provider in Keycloak

In Keycloak, is there a way to assign users to a default group when those user sign in over an Identity Provider? Note: This already works with roles. E.g. navigate to Identity Provider → select Provider → Mappers → New → Hardcoded Role → select…
12
votes
3 answers

Keycloak: Session cookies are missing within the token request with the new Chrome SameSite/Secure cookie enforcement

Recently my application using Keycloak stopped working with a 400 token request after authenticating. What I found so far is that within the token request, the Keycloak cookies (AUTH_SESSION_ID, KEYCLOAK_IDENTITY, KEYCLOAK_SESSION) are not sent…
Ziko
  • 919
  • 2
  • 10
  • 22
12
votes
4 answers

KeyCloak - Create Realms/Users/Groups Programmatically?

We've decided to move to KeyCloak for our identity and access management solution, rather than implement it entirely within our Java EE web app. We're creating a multi-tenant solution, and would prefer to create security realms/users/groups…
Shadowman
  • 11,150
  • 19
  • 100
  • 198
10
votes
2 answers

Does keycloak support mongodb as a database?

We can use PostgreSQL or MySQL as DB for keycloak but I want to use mongo DB as database for keycloak. is there any way to implement this ?
10
votes
2 answers

SMS based OTP in keycloak is possible?

I am exploring keycloak and I want to build an application that was based on user mobile number, SMS OTP should go to the user for authentication. I am not finding any where.
Rahul
  • 493
  • 3
  • 7
  • 25
1
2
3
40 41