Skip to main content
498 questions
Newest Active Bountied Unanswered
Filter by
Sorted by
Tagged with
0 votes
0 answers
18 views

I use Keycloak server 26.2.0. I have several realms (for multitenancy). Each realm has a client with the same name, which has authorization enabled. I'm trying to create resources using the Keycloak ...
pickstar's user avatar
  • 43
0 votes
0 answers
114 views

I'm experiencing a caching issue with Refit when calling Keycloak Admin API endpoints. Despite setting various no-cache headers and implementing a custom HttpMessageHandler, I'm still getting cached ...
Alptekin's user avatar
  • 1
0 votes
1 answer
64 views

When we click on 'Forgot Password', an email gets delivered with a reset link. This Reset link redirects to login-update-password.ftl. The same FTL is called from the account management page when the ...
Saurabh's user avatar
  • 15
0 votes
0 answers
46 views

I have a registration workflow on my app that does not use keycloak registration page. The user enter his login and name and I programatically invoke the executeActionsEmail with UPDATE_PASSWORD so it ...
ctruchi's user avatar
  • 153
1 vote
0 answers
104 views

When using the update() method of org.keycloak.admin.client.resource.UserResource, and assuming the user name and/or email address already exists, Keycloak throws a 409 error via org.jboss.resteasy....
Murrah's user avatar
  • 1,750
2 votes
1 answer
109 views

I have created a client (ntrcpt_service) and selected "Service account roles". I have added the "admin" role to the client's service account roles. I am able to authenticate with ...
Ron Slosberg's user avatar
  • 27
1 vote
1 answer
2k views

I am using Keycloak 26 on Docker (locally) and the health check does not work. According to documentation, I added this configuration for it: - KC_HEALTH_ENABLED=true - KC_METRICS_ENABLED=true - ...
Maxime's user avatar
  • 11
1 vote
1 answer
113 views

I am writing integration tests in which I use testcontainers with keycloak 24.0.5. I want to enable totp for the admin realm. It's easy to set this setting in the GUI but I need to set it ...
user avatar
0 votes
0 answers
23 views

I have a keycloak extension that performs this private List<IdentityProviderMapperModel> getAllMappersForExistingRole(RealmModel realm, RoleModel existingRole) { return realm....
Nitinram Velraaj's user avatar
  • 11
2 votes
2 answers
983 views

I’m automating a Keycloak 26.1.2 installation and need to create a permanent admin (aka “superuser") entirely via shell script and the Admin CLI (kcadm.sh/kc.sh), not via the web UI. My ...
Dawid's user avatar
  • 757
0 votes
1 answer
124 views

I am using Quarkus 3.21.4 in dev mode with Keycloak 26.1.3 running in a container. My app uses the keycloak admin client to set some custom properties in keycloak for a user. All works correctly after ...
Murrah's user avatar
  • 1,750
0 votes
1 answer
44 views

I'm using a client/service account in Keycloak's master realm (with an admin role) to manage multiple realms via REST APIs. The client application uses this credentials to obtain an access token and ...
One Developer's user avatar
  • 768
0 votes
0 answers
67 views

Is there a way to insert a custom field in the column details_json of an event in event_entity? I have tried to build a custom Event Listener, but that doen not seems to be inserting anything. I am ...
Rafael Jorda's user avatar
  • 21
0 votes
0 answers
44 views

Worded this question the best I could... I'm following this guide to enable token exchange between two users in Keycloak. The idea here is to log in as userA in realmA, and then exchange that access ...
DrTeeth's user avatar
  • 1,437
0 votes
1 answer
265 views

I'm working with a custom EventListenerProvider in Keycloak 18 to handle LOGIN and LOGIN_ERROR events. I aim to modify the Event object details by adding a custom attribute (like orgId) and have the ...
Pat's's user avatar
  • 51
1 vote
1 answer
828 views

I’m facing an issue with Keycloak LDAP integration related to user synchronization. The LDAP sync works fine when a user only exists in LDAP—Keycloak automatically creates the user upon sync. However, ...
Arshak Ahamed's user avatar
  • 133
2 votes
1 answer
293 views

I am been looking at keycloak documentation, and while I have figured out how to create custom login pages, I can not seem to find the way to send information to keycloak, in the url, about what theme ...
The Elina's user avatar
  • 39
0 votes
1 answer
104 views

I am upgrading from Keycloak 12 to Keycloak 26 and adapting custom providers for this version. During a procedure, I get the following error: 2025-01-30 15:12:45,024 ERROR [org.keycloak.events....
lala's user avatar
  • 1
2 votes
0 answers
79 views

I have a backend written in Java and a frontend in ReactJS, where I am using Keycloak for authentication. My frontend handles two types of login flows: Google Login via Keycloak Identity Provider ...
Beu's user avatar
  • 1,634
0 votes
0 answers
27 views

I'm working on a domain extension in Keycloak 21.0.2 and facing an issue when trying to fetch data through its endpoint. I haven’t modified the code from the example. I simply compiled it, added the ...
b0w92's user avatar
  • 83
1 vote
1 answer
2k views

I'm working with Keycloak 26 and want to define custom user attributes (e.g. user_type ) at the realm level so they appear in the user profile. Here's what I've tried in my Java (Spring Boot) service, ...
pavithra prabodha's user avatar
  • 1,096
0 votes
0 answers
37 views

I have an installation service so I can programmatically create a new tenant which includes setting up a Keycloak Realm. In order to do this, I am using the Keycloak.Net.Core library and I have ...
gcdevs's user avatar
  • 21
0 votes
1 answer
380 views

I am trying to add a wrapper function over /openid-connect/token/introspect endpoint and openid-connect/token/userinfo. I tried with the validate the token by passing the token in the body of the ...
Tuhin Banerjee's user avatar
  • 1
1 vote
0 answers
71 views

To integrate google-calendar in my backend i needs the end-user refresh token from google. the needs is to reuse this refresh_token to push data into the end-user calendar when i get events in my ...
Clément Gayet's user avatar
  • 11
1 vote
1 answer
750 views

In my Keycloak setup, I have several client scopes and roles: Scopes represent specific permissions (e.g., entity.create, entity.view, entity.delete). Roles aggregate these permissions (e.g., the &...
Paolo Leggiadro's user avatar
  • 11
1 vote
0 answers
206 views

I want to remove all the users sessions only for the specify client in Keycloak but I am not finding a way. What I did until now is as below: List<UserSessionModel> userSessions = session....
Taxhi's user avatar
  • 69
1 vote
1 answer
349 views

I need to change my current Keycloak configuration to set up a Keycloak broker that queries a remote SAML Identity Provider (IdP). Here is the metadata.xml. I’m unsure if I need to configure both an ...
tascio's user avatar
  • 41
0 votes
1 answer
342 views

Keycloak offers several REST calls to retrieve client or user sessions from it's builtin Infinispan cache. It is also possible to delete sessions via the REST API. I'd like to know if it is possible ...
Lúthien's user avatar
  • 163
0 votes
0 answers
48 views

I am trying to execute this code: Keycloak keycloak = KeycloakBuilder.builder() //http://localhost:8080/realms/API/protocol/openid-connect/token //.serverUrl("http://...
Sharmi467's user avatar
  • 1
1 vote
1 answer
787 views

I'm building a Next.js application and I have implemented a custom registration page for users. I want to use Keycloak-js to handle user registration directly within the Next.js app, allowing for a ...
Sérgio Serra's user avatar
  • 27
1 vote
1 answer
1k views

I am new to Keycloak and trying to wrap my head around how to properly register a user using the Keycloack admin client The documentation doesn't have concrete examples and there a ton of screen shots ...
Spindoctor's user avatar
  • 481
1 vote
1 answer
630 views

I am creating FastApi + KeyCloak application. Created realm, client and user Client configuration My user configuration I can obtain token with help of this request But for grant_type client-...
mascai's user avatar
  • 1,748
0 votes
0 answers
151 views

Keycloak 22 some token requests tokes time in minutes, and some execute very fast, what may be the reason of longer duration ? Tried updating keycloak version, but if there is any way to reduce token ...
Piyush D's user avatar
  • 1
2 votes
1 answer
742 views

I'm trying to execute some requests to the Keycloak Admin API Rest to perform some operations. I need to add a new attribute to the realm user profile. In the documentation: Keycloak Admin REST API ...
Johan Pino's user avatar
  • 295
1 vote
0 answers
306 views

In Keycloak 21.1, I was able to send the execute-actions-email request for the master realm users using the following endpoint: curl --location --request PUT 'http://<your_ip>:<your_port>/...
okaeiz's user avatar
  • 428
0 votes
1 answer
200 views

I have a non-master realm in my Keycloak instance which is called camunda-platform (it is deployed with the official Docker Compose configuration file of Camunda 8 Self-Managed). I want to use the ...
okaeiz's user avatar
  • 428
0 votes
1 answer
1k views

The setup works only if Keycloak(localhost:8700) and spring boot client(localhost:8180) are in same machine(localhost). when keycloack(https://cloud.keycloak.com) is in cloud with iis reverse proxy ...
sam kada's user avatar
  • 1
0 votes
1 answer
428 views

I'm a beginner with Keycloak and I'm learning how to create a Keycloak authentication server for a .NET application, where I can have multiple clients within a Realm, and these clients may or may not ...
Gabriel Ribeiro's user avatar
  • 3
0 votes
0 answers
509 views

I am using Keycloak latest version, where I have created a realm using Standard Flow running on port http://127.0.0.1:5001/. The admin UI is running as expected on http://127.0.0.1:5001/auth The ...
San Jaisy's user avatar
  • 17.5k
0 votes
0 answers
2k views

I am currently required to configure the Username and Password policy from the KeyCloak app. Surely, I could configure the Password Policy, from the Authenticatio -> Password Policy Screen. However,...
J. Abel's user avatar
  • 956
3 votes
1 answer
1k views

I'm working on a token-exchange request of keycloak wherein trying to get the access token of client2 while being authenticated with client1. Have enabled token_exchange and admin_fine_grained_authz ...
Vinod Louis's user avatar
  • 4,906
1 vote
0 answers
177 views

I use keycloak version 21.1.1, I added new custom endpoint(test endpoint), here link to my sample project - https://github.com/j-developer-days/keycloak-rest-endpoint/tree/Option1 in github I ...
JDev's user avatar
  • 11
1 vote
1 answer
1k views

I'm working on a project where I need to implement a custom grant type in Keycloak to meet specific authentication requirements. I've looked through the Keycloak documentation, but I'm having trouble ...
Shades's user avatar
  • 11
1 vote
1 answer
890 views

Context I have a php website. Keycloak is used for auth. This part works fine. I now try to save user related state to keycloak directly via its REST API (to not need another user db). The Problem ...
andymel's user avatar
  • 6,068
1 vote
1 answer
1k views

I don't see the user specified client roles added to the id token in the latest version as well. They mentioned it was fixed (https://github.com/keycloak/keycloak/issues/14617) Role added to user as ...
Payal Bansal's user avatar
  • 755
0 votes
1 answer
275 views

The reason why i want to use client authentication is to use the token to add users/group/roles and and most of the api functions. I have been trying to use the ReactKeyClaokProvider from keycloak ...
DaylightintheUS's user avatar
  • 1
0 votes
1 answer
226 views

Keycloak, by default, does not forward tokens received from external Identity Providers (IDPs), such as Google. To access resources like the Google Calendar, it is necessary to obtain the refresh and ...
Lora Lameh's user avatar
  • 1
0 votes
1 answer
510 views

I have created a keyclock deployment/pod using the below yaml in my EKS kubernetes cluster. The keycloak is connected to external postgres rds database. I created the admin user and password during ...
Goural's user avatar
  • 79
1 vote
1 answer
130 views

I need to get the clients of the composites of a role in the keycloak API When I try to get the composite of a role the API returns JSON like this: { "id": "3bb6c58e-17c6-497f-...
Gabriel Mandelli Cardoso's user avatar
  • 13
0 votes
1 answer
648 views

keycloak = KeycloakBuilder.builder() .serverUrl("http://localhost:8084") // 404:without /auth 400:with /auth .realm( "my-group-dev") ....
TonyYen's user avatar
  • 51

1
2 3 4 5
…
10