Questions tagged [keycloak-services]
608 questions
16
votes
4 answers
Keycloak/OIDC : retrieve user groups attributes
I've extracted a user's groups information from the OIDC endpoint of Keycloak, but they don't come with the group ATTRIBUTES I defined (see Attributes tab into the group form, near Settings). Is there a claim to add to my request?
I'm using a…

Thomas Escolan
- 1,298
- 1
- 10
- 28
16
votes
2 answers
Why is 'id' called 'sub' in keycloak?
Im looking at the new Keycloak Beta 4 API. When i get the users account information, what is referred to as 'id' in the web ui comes back as 'sub' in the account object.
{ sub: '25a37fd0-d10e-40ca-af6c-821f20e01be8',
name: 'Barrack Obama',
…

Jack Murphy
- 2,952
- 1
- 30
- 49
16
votes
4 answers
cannot create user in the keycloak. Getting 403 status
I am trying to access the create a user in the keycloak programmatically. But I am getting 403 as a status code. I am following the below link.
https://technology.first8.nl/programmatically-adding-users-in-keycloak/
Can anyone help me? Thanks In…

Programmer
- 657
- 4
- 9
- 21
15
votes
3 answers
Can we create users in Keycloak by sending a json array containing more than 2 user info?
I was able to create user in Keycloak by posting a json containing only 1 user using postman.
http://localhost:8080/auth/admin/realms/master/users
But when i tried to create more than 1 user by passing a json array of more than 1 record i am …

Midhun Gopinath
- 291
- 2
- 4
- 13
15
votes
1 answer
Keycloak: How to auto redirect Keycloak user to OKTA SSO page instead of clicking on button?
I have followed the guide https://ultimatesecurity.pro/post/okta-saml/ , to
configure OKTA Saml with keycloak. After this configuration, I see
Okta/saml login button on login page, clicking on which, the user is
redirected to Okta login/SSO.
Now,…

tryingToLearn
- 10,691
- 12
- 80
- 114
14
votes
3 answers
Keycloak SSL setup using docker image
I am trying to deploy keycloak using docker image (https://hub.docker.com/r/jboss/keycloak/ version 4.5.0-Final) and facing an issue with setting up SSL.
According to the docs
Keycloak image allows you to specify both a
private key and a…

Vsoma
- 595
- 1
- 5
- 17
13
votes
7 answers
Keycloak Invalid token issuer
I have a mobile app(react-native), a resource service(spring boot) and Keycloak Authenticatioin Service(Auth-Service).
Client makes authentication directly with Auth-Service and gets the access token.
When I do a request to the resource service, the…

Muhammed Ozdogan
- 5,341
- 8
- 32
- 53
13
votes
8 answers
Keycloak Admin Rest API unknown_error for update user API
I am trying to add a custom attribute to a user using Admin Rest API.
When i try with default master realm, its working fine. But when i try it with another realm that i created, it yields "unknown_error".
I have attached the screenshot of request…

Muhammad Umair
- 242
- 1
- 3
- 7
13
votes
1 answer
How to export realm file into keycloak docker container?
I'm trying to export a realm file into keycloak docker container, I'm not able to do that because the server is runing when I execute this command:
bin/standalone.sh -Dkeycloak.migration.action=export
-Dkeycloak.migration.provider=dir…

Slim
- 5,527
- 13
- 45
- 81
13
votes
2 answers
How to get current user profile picture with Keycloak?
I am trying to get user profile picture and other information those who logged-in using Identity provider like Google or Facebook in my AngularJs application using Keycloak authentication.

avi
- 212
- 1
- 5
- 15
12
votes
2 answers
How to set a default group on an Identity Provider in Keycloak
In Keycloak, is there a way to assign users to a default group when those user sign in over an Identity Provider?
Note: This already works with roles. E.g. navigate to Identity Provider → select Provider → Mappers → New → Hardcoded Role → select…

gehtmaguad
- 443
- 4
- 9
12
votes
3 answers
Keycloak: Session cookies are missing within the token request with the new Chrome SameSite/Secure cookie enforcement
Recently my application using Keycloak stopped working with a 400 token request after authenticating.
What I found so far is that within the token request, the Keycloak cookies (AUTH_SESSION_ID, KEYCLOAK_IDENTITY, KEYCLOAK_SESSION) are not sent…

Ziko
- 919
- 2
- 10
- 22
12
votes
4 answers
KeyCloak - Create Realms/Users/Groups Programmatically?
We've decided to move to KeyCloak for our identity and access management solution, rather than implement it entirely within our Java EE web app. We're creating a multi-tenant solution, and would prefer to create security realms/users/groups…

Shadowman
- 11,150
- 19
- 100
- 198
10
votes
2 answers
Does keycloak support mongodb as a database?
We can use PostgreSQL or MySQL as DB for keycloak but I want to use mongo DB as database for keycloak.
is there any way to implement this ?

Amol Jadhav
- 133
- 2
- 6
10
votes
2 answers
SMS based OTP in keycloak is possible?
I am exploring keycloak and I want to build an application that was based on user mobile number, SMS OTP should go to the user for authentication. I am not finding any where.

Rahul
- 493
- 3
- 7
- 25