Repository navigation
Identity provider, reverse proxy for redirect URIs #40427
Unanswered
robertoneto-senior
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
I'm trying to migrate my current IdP based on WSO2 to Keycloak.
My big issue now is the Redirect URI
At my old IdP we use a URI like
https://my-domain.com/commonauthto receive the SAML Response, as so the SAML Request that is send with this one.To prevent impacts on my customers environments, I need to maintain this old URI
/commonauthinstead of changing it to the/realms/{realm}/broker/{idp}/endpoint.I was thinking about create a proxy (nginx) to intercept the SAML responses on
/commonauthwith an HTML and a javascript to re-post the SAML Response form-data to the correct/realms/{realm}/broker/{idp}/endpointat keycloak.And here I'm getting in trouble...
The keycloak creates the SOAP message for SAML Request pointing to the keycloak endpoint on the
AssertionConsumerServiceURLattribute. So, when the SAML provider receives this request, it will:/commonauth(my old IdP endpoint).Someone can help me how to solve this without impacting my customers?
All reactions