Repository navigation
Token signature validation failed #41486
Replies: 1 comment
|
I got the resolution. App registration created for SSO was only supported the SAML. I have recreated the app registration which support OpenId connect. |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
I am using KC v 23.0.5. I have created realm and set up identity provider using openId connect. I have followed below article to set up idp.
https://rahulroyz.medium.com/using-keycloak-as-idp-for-azure-ad-sso-authentication-role-authorization-0b309c15eadc
I'm not able to login using SSO. I am getting token signature validation failed error.
DEBUG [org.keycloak.broker.oidc.OIDCIdentityProvider] (executor-thread-9) Failed to verify token, key not found for algorithm RS256
ERROR [org.keycloak.broker.oidc.AbstractOAuth2IdentityProvider] (executor-thread-9) Failed to make identity provider oauth callback: org.keycloak.broker.provider.IdentityBrokerException:
token signature validation failed
I am running keycloak as docker image AKS is in private azure subscriptions.
keycloak logs:
2025-07-29 15:48:57,463 WARN [org.keycloak.keys.infinispan.InfinispanPublicKeyStorageProvider] (executor-thread-117) PublicKey wasn't found in the storage. Requested kid: 'e-PiglIyWpFEcTUEMZVXofmzNGE' . Availab
le kids: '[PoVKeirIOvmTyLQ9G9BenBwos7k, _jNwjeSnvTTK8XEdr5QUPkBRLLo, JYhAcTPMZ_LX6DBlOWQ7Hn0NeXE, -cgAvjmmQ24Ks20zIpDB4SW894w, Km8oaDUbb_pVUGsT38eHX87v078]'
2025-07-29 15:48:57,463 ERROR [org.keycloak.broker.oidc.AbstractOAuth2IdentityProvider] (executor-thread-117) Failed to make identity provider oauth callback: org.keycloak.broker.provider.IdentityBrokerException
: token signature validation failed
at org.keycloak.broker.oidc.OIDCIdentityProvider.parseTokenInput(OIDCIdentityProvider.java:679)
at org.keycloak.broker.oidc.OIDCIdentityProvider.validateToken(OIDCIdentityProvider.java:696)
at org.keycloak.broker.oidc.OIDCIdentityProvider.validateToken(OIDCIdentityProvider.java:690)
at org.keycloak.broker.oidc.OIDCIdentityProvider.getFederatedIdentity(OIDCIdentityProvider.java:380)
at org.keycloak.broker.oidc.AbstractOAuth2IdentityProvider$Endpoint.authResponse(AbstractOAuth2IdentityProvider.java:529)
at org.keycloak.broker.oidc.AbstractOAuth2IdentityProvider$Endpoint$quarkusrestinvoker$authResponse_fef2d69ce31937f365a37fb3083f9247bc4c56d2.invoke(Unknown Source)
at org.jboss.resteasy.reactive.server.handlers.InvocationHandler.handle(InvocationHandler.java:29)
at io.quarkus.resteasy.reactive.server.runtime.QuarkusResteasyReactiveRequestContext.invokeHandler(QuarkusResteasyReactiveRequestContext.java:141)
at org.jboss.resteasy.reactive.common.core.AbstractResteasyReactiveContext.run(AbstractResteasyReactiveContext.java:145)
at io.quarkus.vertx.core.runtime.VertxCoreRecorder$14.runWith(VertxCoreRecorder.java:576)
at org.jboss.threads.EnhancedQueueExecutor$Task.run(EnhancedQueueExecutor.java:2513)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1538)
at org.jboss.threads.DelegatingRunnable.run(DelegatingRunnable.java:29)
at org.jboss.threads.ThreadLocalResettingRunnable.run(ThreadLocalResettingRunnable.java:29)
at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30)
at java.base/java.lang.Thread.run(Thread.java:840)
2025-07-29 15:48:57,464 WARN [org.keycloak.events] (executor-thread-117) type="IDENTITY_PROVIDER_LOGIN_ERROR", realmId="", clientId="account-console", userId="null", ipAddres
s="", error="identity_provider_login_failure", code_id=""
Do let me know if you need further details.
All reactions