topic Re: Keycloak authentification APS in Alfresco Forum

Keycloak authentification APS

narjisseatos — Thu, 28 Feb 2019 15:04:29 GMT

Hi,I have a problem when I try to connect keycloak to APSkeycloak version: 3.4.3APS version: 1.9.01ACS version : 6.1«localhost:9080/activiti-app» redirects to :http://localhost:8080/auth/realms/alfresco-dbp/protocol/openid-connect/auth?response_type=code&client_id=alfresco-client&redirect_ur

Re: Keycloak authentification APS

bassam_al-saror — Fri, 01 Mar 2019 09:33:21 GMT

Looks like APS isn't able to connect to Keycloak. Are they both running on different containers?

Re: Keycloak authentification APS

narjisseatos — Fri, 01 Mar 2019 10:05:43 GMT

Thanks,

Yes, different containers

Re: Keycloak authentification APS

bassam_al-saror — Fri, 01 Mar 2019 14:52:33 GMT

The Keycloak URL isn't correct it should point to the Keycloak instance. I'm not sure how do it but you look into how to make the Keycloak accessible to APS. I guess docker has a way to make two containers accessible to each other.

keycloak.auth-server-url=http://localhost:8080/auth

Re: Keycloak authentification APS

narjisseatos — Fri, 01 Mar 2019 15:20:25 GMT

The Keycloak URL is correct when i call this URL

«localhost:9080/activiti-app» redirects me to :

http://localhost:8080/auth/realms/alfresco-dbp/protocol/openid-connect/auth?response_type=code&client_id=alfresco-client&redirect_uri=http%3A%2F%2Flocalhost%3A9080%2Factiviti-app%2Fsso%2Flogin&state=e1f89ef2-25e3-4ea4-b3f4-aac61e6e5a57&login=true&scope=openid

And the two dockers are accessible to each other

I don't understand your response

Re: Keycloak authentification APS

bassam_al-saror — Fri, 01 Mar 2019 16:27:29 GMT

The URL is pointing to localhost which isn't correct since Keycloak is on a different docker.

Re: Keycloak authentification APS

bassam_al-saror — Fri, 01 Mar 2019 16:32:14 GMT

In the exception you posted it's clear that Keycloak is unreachable "Connection refused".

Re: Keycloak authentification APS

adrianmiramar — Tue, 18 Feb 2020 19:02:43 GMT

I dont know if the problem was the same or similiar but in my case I had to set the "Require SSL" to NONE on the REALM, because the URL validation token has to be SSL and I has a self signed certificate

I don't understand why the error is 404 (I think this is wrong because is very confusing) but the real issue is for conection between APS and the Keycloak.