You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I want to set up Keycloak as a relying-party in an open ID connect 1.0 federation.
In short:
My keycloak instance wants to be the authorization server for my API (handling/managing access tokens)
There is a federation master, that manages all parties (or rather allows the other parties to communicate) in the federation: authorization servers like myself, as well as other authentication servers
Authentication servers are the ones holding the actual users and over those the user authenticates.
When the user wants to access my service, he authenticates at one of the (on the federation master registered) authentication servers, my authorization server gets some sort of token where I then know, this user is allowed to access my service (maybe there are claims with information in it, for my use)
So far, this, as far as I understood it, is all part of OIDC. And keycloak supports OIDC.
What I've found, in keycloak, so far, is that it provides the endpoint /realms/<realm>/.well-known/openid-configuration (I believe that is accessible by default on any keycloak instance), which looks very similar to what is required, but if you look at the details, you'll see that it is actually something different.
I'm guessing my OIDC is not yet set up correctly?
I'd be happy for any kind of pointer that anyone can give me, or any information at all!
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
I want to set up Keycloak as a relying-party in an open ID connect 1.0 federation.
In short:
So far, this, as far as I understood it, is all part of OIDC. And keycloak supports OIDC.
The problem(s):
The federation master requires me to provide him with an endpoint, that contains an entity statement ( https://openid.net/specs/openid-connect-federation-1_0-29.html#name-entity-statement ) under an endpoint
/realms/<realm>/.well-known/openid-federation.What I've found, in keycloak, so far, is that it provides the endpoint
/realms/<realm>/.well-known/openid-configuration(I believe that is accessible by default on any keycloak instance), which looks very similar to what is required, but if you look at the details, you'll see that it is actually something different.I'm guessing my OIDC is not yet set up correctly?
I'd be happy for any kind of pointer that anyone can give me, or any information at all!
Similar and related to: #23435, but this wasn't helpful
I've found this https://github.com/eosc-kc/keycloak-oidc-federation, but this seems to be old and not maintained
All reactions