Red Hat Single Sign-On (RH-SSO) is based on the Keycloak project and enables you to secure your web applications by providing Web single sign-on (SSO) capabilities based on popular standards such as SAML 2.0, OpenID Connect and OAuth 2.0. The RH-SSO server can act as a SAML or OpenID Connect-based Identity Provider, mediating with your enterprise user directory or 3rd-party SSO provider for identity information and your applications via tokens.
Questions tagged [redhat-sso]
42 questions
0
votes
1 answer
Keycloak API call dependency for Red Hat SSO 7.3.0.GA
I am calling keycloak api in my project using below code. It is working in Keylcloak 7.0.1. But, it is not working RedHat SSO 7.3.0.GA
Keycloak kc = KeycloakBuilder.builder()
.realm(MASTERREALM)
.username(USERNAME)
…

Gopi
- 111
- 1
- 1
- 6
0
votes
1 answer
Its is possible to create Realm in (Keycloak or RH-SSO) throught the CLI - GUI?
Is it possible to create Realm through the CLI - GUI?
I would like to know if it is possible to create a realm via CLI - GUI. (I started the gui with the command “. \ Jboss-cli.sh --gui”)
If possible, how can I do this?
Thank you

Lovera
- 172
- 2
- 15
0
votes
2 answers
Spring Cloud Data Flow security configuracion and integration with RedHat SSO
We are trying to turn on the security for Spring Cloud Data Flow following the documentation (https://docs.spring.io/spring-cloud-dataflow/docs/current-SNAPSHOT/reference/htmlsingle/#configuration-security) but we have some knowledge gaps that we…

RLS
- 65
- 2
- 10
0
votes
1 answer
Redirect secured by Keycloak client side apps to login page after idle timeout. Apps are behind app gateway
How to implement logout of client side services after idle timeout?
Services are secured by Keycloak + Application gateway.
The Gateway is node.js app which protects services' urls using Keycloak node.js adapter, so that authentication will be…

rok
- 9,403
- 17
- 70
- 126
0
votes
1 answer
Is quorum needed in Keycloak Standalone Clustered Configuration?
It's stated that Keycloak is built on top of the WildFly application server and its sub-projects like Infinispan (for caching) and Hibernate (for persistence).
Keycloak recommends to look in WildFly Documentation and High Availability Guide.
If…

rok
- 9,403
- 17
- 70
- 126
0
votes
0 answers
Keycloak/Java webapp: How to get JWT token
I'm working on securing a legacy monolith webapp with Keycloak (I'm pretty new to Keycloak) and am trying to figure out how best to retrieve the JWT token so I can extract some attributes from it. I've been playing around with it for a couple of…

cloudwalker
- 2,346
- 1
- 31
- 69
0
votes
1 answer
How to enable mutual SSL verification mode in Redhat-SSO image for OpenShift
I am using the template sso72-x509-postgresql-persistent, which is based on Redhat-SSO and Keycloak, to create an application in OpenShift.
I am going to enable its mutual SSL mode, so that a user has to only provide his certificate instead of user…

ostmond
- 519
- 1
- 7
- 13
0
votes
0 answers
“invalid code” (token) because reset passwort link was already visited
In Red Hat Single Sign-On (and also in Keycloak), there is this Forgot Password? functionality. If you click it and then enter your username, you will get an email with a link to change your password.
Note: Visiting the URL of that link invalides…

Marcus
- 1,857
- 4
- 22
- 44
0
votes
0 answers
Keycloak Module load from artifact
I added custom module to keycloak (keycloak version 2.5.5, RH-SSO 7.1.GA). Module_PATH/main/module.xml like that;
(Like this example http://blog.keycloak.org/2016/07/loading-providers-and-themes-from-maven.html) =>

Batuhan
- 463
- 2
- 6
- 22
0
votes
1 answer
Spring Boot Application using Keycloak, single sign on doesn't work behind an Apache Web Server
I have a Spring Boot + Spring Security application with RedhatSSO (Keycloak) as OIDC provider. This application is deployed on Openshift which assings it a route like this: http://my-app.cloud.mycompany.com/. The application has this context path:…

codependent
- 23,193
- 31
- 166
- 308
-1
votes
1 answer
redhat sso after deletion of Master-realm client in master Realm, Admin login is blank
Redhat sso after deletion of Master-realm client in master Realm, rdsso admin login (/auth/admin/master/console/) is blank.
And in the rdsso server log, we can see this Error
ERROR [org.keycloak.services.error.KeycloakErrorHandler] (default…
-1
votes
1 answer
Does the ITfoxtec.Identity.Saml2 .NET Core library support RedHat SSO with SAML 2.0 or has anyone gotten it to work?
Looking for the easiest way to authenticate with RedHat SSO SAML 2.0 (not OpenId) in a .NET Core application. I stumbled upon the ITfoxtec.Identity.Saml2 library and was wondering if anyone has gotten this to work before struggling with an endless…

Dan
- 894
- 9
- 21