keycloak

Keycloak IdP SAML 2 Export of XML metdata to an SP

醉酒当歌 提交于 2019-12-05 07:43:11
I'm using Keycloak version 1.6.1, newly installed as a standalone application. Keycloak should act as an IdP (Identity provider) for an SP (Service Provider) called Tableau. I have read from this page: http://blog.keycloak.org/2015/03/picketlink-and-keycloak-projects-are.html ... Keycloak from being Identity Broker grew into being fully fledged Identity Provider While it was an Identity Broker, it is now also an Identity Provider. My question is then: I have exported the SP XML Metadata from Tableau, which I imported into Keycloak, but when it comes to the export of the IdP XML Metadata from

How to integrate or make use of KeyCloak user database in my application?

浪子不回头ぞ 提交于 2019-12-05 06:15:07
问题 So far I have been playing with KeyCloak and been able to set it up and running the customer-portal example successfully. Now I need to actually use it in my application, and I am not totally sure whether KeyCloak is the right thing that I am looking for, but I believe my need is just a common use case and hopefully KeyCloak is the right software that I am looking for.. When a user comes to my website, he registers and makes a post. Both the post and the user information is stored into

Cant access keycloak rest API methods *404*

醉酒当歌 提交于 2019-12-05 05:56:45
I am using the latest keycloak image in docker and can access the standard admin console at http://localhost:9080 . However, I cant seem to access any of the paths specified in the documentation for Admin REST api. For instance, the base path /auth and Resource Get clients belonging to the realm Returns a list of clients belonging to the realm: /{realm}/clients I am getting a 404. So is for any other method in the documentation . The only path returning a valid 200 json response is http://localhost:9080/auth/realms/ {realm-name}/ which according to the documentation be reachable at basepath +

Keycloak is causing IE to have an infinite loop

我与影子孤独终老i 提交于 2019-12-05 05:36:53
we are using a keycloak 1.3.1 authentication library, and I've noticed that once I initialize the keycloak with { onLoad: 'login-required' } , IE (11) gets infinite loop... Other browsers work fine. I'm basically doing this: keycloak.init({ onLoad: 'login-required' }).success(function(authenticated) { console.info(authenticated ? 'authenticated' : 'not authenticated'); some other stuff... }).error(function() { console.warn('failed to initialize'); }); Any idea what's causing it, and to solve this? Trying to install the newest version 1.4.0 now in hopes the weird bug gets solved. Thanks in

How to get javax.servlet.Filter called before Keycloak Authentication

跟風遠走 提交于 2019-12-05 01:42:51
We have developed a REST API using the resteasy. (deployed in wildfly 10) Basically these REST APIs are called internally from another application and end points are secured with keycloak. But one endpoint is exposed to outside party (that endpoint is also secured with keycloak). But since the outside party can't provide the Keycloak Autherization code, we have done an implementation where client is registerred with application generated auth_key and client will call the endpoint with that auth_key. Then in the a web filter (a javax.servlet.Filter), using tha auth_key we get the relevant

Didn't find publicKey for kid ,Keycloak?

那年仲夏 提交于 2019-12-05 01:06:11
I am getting this exception "Didn't find publicKey for kid" while calling endpoint from angular js 2 to the widlfly server . authentication happened in keycloak , however i am calling about 8 endpoints from different clients (different micro services ) within same realm using same token but i got this exception only for this microservice call . i am sure that the user has all roles for all clients . i also decoded the token on JWT to verify that. sometimes it works and sometimes no!! this the exception stack trace : Caused by: java.lang.RuntimeException: Unexpected error: java.security

How to properly do delegated user self-administration with Keycloak

∥☆過路亽.° 提交于 2019-12-04 22:16:44
问题 I’ve got questions on how to properly do delegated user self-administration with Keycloak. Some background information: We are working with hundreds or even thousands of organizations for which we want to manage access to our applications. Some of these organizations are our internal divisions for which we have active directories. Users from these organizations can be integrated through “User Storage Federation” and they will continue to be maintained in the respective directories. Some of

Keycloak login page shows 'invalid parameter: redirect_uri'

这一生的挚爱 提交于 2019-12-04 20:56:42
问题 I am using Keycloak authentication to authenticate an angular app and so far I have managed to redirect my login to Keycloak server. But when redirected instead of the login page I am getting a 500 error page with the message Invalid parameter: redirect_uri 回答1: When you created the client in Keycloak you set the required 'Valid Redirect URIs' field. Most likely the pattern you entered there doesn't match the redirect uri you are sending from your client. If you use ports numbers, they have

How to get current user name with Keycloak?

孤街醉人 提交于 2019-12-04 19:21:46
I am trying to modify this example Angular2 application to display the currently logged in user. First I tried getting it directly from KeycloakService.tokenParsed.preferred_username but it doesn't seem to exist out of the box with the example code. My guess is that I have to add a function to the KeycloakService to go fetch the user name separately but I am not sure that it is the simplest approach and how to go about this? Solution : Based on @uchihaitachi's suggestion, here's the working method that I've added to my KeycloakService: getPreferredUserName(): Promise<string> { return new

Keycloak Docker HTTPS required

痴心易碎 提交于 2019-12-04 18:37:10
问题 I have initialized https://hub.docker.com/r/jboss/keycloak/ on my Digital Ocean Docker Droplet. $docker run -e KEYCLOAK_USER=admin -e -p 8080:8080 KEYCLOAK_PASSWORD={password with upcase etc.} jboss/keycloak success Everything worked well and the server started in the Droplets IP address on a port :8080. Problems started when I entered the admin console from the UI in the URL. There was a message: "HTTPS required". This was a real issue and the only solution I have found is to login to the