# Miscellanaeous

**URL:** https://forum.keycloak.org/c/miscellanaeous/1.md?page=2

[Latest](https://forum.keycloak.org/latest.md) · [Categories](https://forum.keycloak.org/categories.md) · [Tags](https://forum.keycloak.org/tags.md)

**Page:** 3

---

## [SAML/LDAP migration to OIDC/LDAP](https://forum.keycloak.org/t/saml-ldap-migration-to-oidc-ldap/30311)

<div class="topic-metadata">

**Author:** [@munikumar.kotera](https://forum.keycloak.org/u/munikumar.kotera)\
**Replies:** 0\
**Last updated:** [August 15, 2025, 6:42pm UTC](https://forum.keycloak.org/t/saml-ldap-migration-to-oidc-ldap/30311 "2025-08-15T18:42:19Z")

</div>

Right now, we are leveraging Keycloak as identity broker for SAML authentication along with external IDP(OKTA) and only the user roles are federated from LDAP. So far, this configuration is working perfectly fine. We ar…

---

## [Keycloak cluster using cluster DB](https://forum.keycloak.org/t/keycloak-cluster-using-cluster-db/30301)

<div class="topic-metadata">

**Author:** [@hgm91hgm](https://forum.keycloak.org/u/hgm91hgm)\
**Replies:** 4\
**Last updated:** [August 14, 2025, 9:22am UTC](https://forum.keycloak.org/t/keycloak-cluster-using-cluster-db/30301 "2025-08-14T09:22:59Z")

</div>

Good morning every one. I want to share with you my problem and I believe that with your help, we can solve it. Right now I have one server with docker and inside I have my aplication with diferent images (backend, fro…

---

## [OAuth2 Standard Auth Flow Returns 404 Then Returns 200 on Hard Reload](https://forum.keycloak.org/t/oauth2-standard-auth-flow-returns-404-then-returns-200-on-hard-reload/30254)

<div class="topic-metadata">

**Author:** [@Brian](https://forum.keycloak.org/u/Brian)\
**Replies:** 2\
**Last updated:** [July 23, 2025, 8:22am UTC](https://forum.keycloak.org/t/oauth2-standard-auth-flow-returns-404-then-returns-200-on-hard-reload/30254 "2025-07-23T08:22:41Z")

</div>

I am trying to configure a basic OAuth2 client to authenticate users for JupyterHub. I have it working with one major annoyance: Unauthorized User enters this address into browser: https://datalab.example.com U…

---

## [Exploring a lightweight, opt‑in Identity Governance & Administration (IGA) profile for Keycloak](https://forum.keycloak.org/t/exploring-a-lightweight-opt-in-identity-governance-administration-iga-profile-for-keycloak/30260)

<div class="topic-metadata">

**Author:** [@tidecloak](https://forum.keycloak.org/u/tidecloak)\
**Replies:** 0\
**Last updated:** [July 23, 2025, 7:56am UTC](https://forum.keycloak.org/t/exploring-a-lightweight-opt-in-identity-governance-administration-iga-profile-for-keycloak/30260 "2025-07-23T07:56:29Z")

</div>

Hi everyone, (and thanks @mabartos for your input!) With many of us leaning on Keycloak as the central point for Identity & Access Management, we still end up plugging in a separate IGA tool - or hacking our own - when…

---

## [Keycloak cannot restart due to "keycloak.WEB\_ORIGINS" table missing](https://forum.keycloak.org/t/keycloak-cannot-restart-due-to-keycloak-web-origins-table-missing/30253)

<div class="topic-metadata">

**Author:** [@jpelletier](https://forum.keycloak.org/u/jpelletier)\
**Replies:** 0\
**Last updated:** [July 21, 2025, 9:22pm UTC](https://forum.keycloak.org/t/keycloak-cannot-restart-due-to-keycloak-web-origins-table-missing/30253 "2025-07-21T21:22:50Z")

</div>

This question pertains to docker container Keycloak backed by MariaDB database running in a Kubernetes environment. Has anyone run into a scenerio where when Keycloak restarts, it suddenly fails to start back and throws…

---

## [Organization selection via social IDP login](https://forum.keycloak.org/t/organization-selection-via-social-idp-login/30226)

<div class="topic-metadata">

**Author:** [@shalini-mekala11](https://forum.keycloak.org/u/shalini-mekala11)\
**Replies:** 1\
**Last updated:** [July 18, 2025, 12:33pm UTC](https://forum.keycloak.org/t/organization-selection-via-social-idp-login/30226 "2025-07-18T12:33:45Z")

</div>

We have a setup where a single user can belong to multiple organizations, and we support social login via an external Identity Provider (IDP) (such as Microsoft). This IDP is shared across all organizations, meaning it i…

---

## [Keycloak.init() failing with "undefined" when the user is already logged in](https://forum.keycloak.org/t/keycloak-init-failing-with-undefined-when-the-user-is-already-logged-in/30241)

<div class="topic-metadata">

**Author:** [@dipti\_joshi](https://forum.keycloak.org/u/dipti_joshi)\
**Replies:** 0\
**Last updated:** [July 18, 2025, 8:07am UTC](https://forum.keycloak.org/t/keycloak-init-failing-with-undefined-when-the-user-is-already-logged-in/30241 "2025-07-18T08:07:40Z")

</div>

Hi, I have keycloak init service defined in auth guard. keycloak.init({ config: { url: 'myserverurl, realm: ‘master’, clientId: ‘client’, }, initOptions: { onLoad: ‘check-sso’, pkceMethod: ‘S256’, redirectUri:…

---

## [Issue with Fetching UserInfo from account-console (Applications.tsx)](https://forum.keycloak.org/t/issue-with-fetching-userinfo-from-account-console-applications-tsx/30223)

<div class="topic-metadata">

**Author:** [@abahmanem](https://forum.keycloak.org/u/abahmanem)\
**Replies:** 0\
**Last updated:** [July 12, 2025, 10:42pm UTC](https://forum.keycloak.org/t/issue-with-fetching-userinfo-from-account-console-applications-tsx/30223 "2025-07-12T22:42:00Z")

</div>

Hello, In the applications.tsx page, I’m trying to retrieve the UserInfo of the logged-in user, specifically the userId. I know that there is a userinfo endpoint in Keycloak, but when I attempt to use it, I encounter a…

---

## [Import user roles to "Service accounts roles" in client](https://forum.keycloak.org/t/import-user-roles-to-service-accounts-roles-in-client/30221)

<div class="topic-metadata">

**Author:** [@tourist](https://forum.keycloak.org/u/tourist)\
**Replies:** 0\
**Last updated:** [July 11, 2025, 12:49pm UTC](https://forum.keycloak.org/t/import-user-roles-to-service-accounts-roles-in-client/30221 "2025-07-11T12:49:54Z")

</div>

Hello, I use Keycloak for services communications In my keycloak setup LDAP Provider in User Federation which mapping roles for user. After Sync All Users done: Realm roles filled with all available roles in LDAP gro…

---

## [Account-ui console as landing user page](https://forum.keycloak.org/t/account-ui-console-as-landing-user-page/30193)

<div class="topic-metadata">

**Author:** [@abahmanem](https://forum.keycloak.org/u/abahmanem)\
**Replies:** 11\
**Last updated:** [July 11, 2025, 11:07am UTC](https://forum.keycloak.org/t/account-ui-console-as-landing-user-page/30193 "2025-07-11T11:07:22Z")

</div>

Hello, I have installed Keycloak 26.2.5 and customized the Login, Admin, and Account Console pages. My need: I want to make the Account Console page the landing page for each user after they log in through the login p…

---

## [Is it possible to restrict roles and resource\_access in tokens?](https://forum.keycloak.org/t/is-it-possible-to-restrict-roles-and-resource-access-in-tokens/30161)

<div class="topic-metadata">

**Author:** [@Joachim](https://forum.keycloak.org/u/Joachim)\
**Replies:** 1\
**Last updated:** [July 8, 2025, 7:27pm UTC](https://forum.keycloak.org/t/is-it-possible-to-restrict-roles-and-resource-access-in-tokens/30161 "2025-07-08T19:27:27Z")

</div>

The token I was able to obtain includes all roles and authorizations the user has. However the client application does not need all but specific ones. Depending on the number of applications existing in the organization,…

---

## [How to integrate KEYCLOAK in IOMAD 4.5 Moodle](https://forum.keycloak.org/t/how-to-integrate-keycloak-in-iomad-4-5-moodle/30163)

<div class="topic-metadata">

**Author:** [@chandrakesh](https://forum.keycloak.org/u/chandrakesh)\
**Replies:** 1\
**Last updated:** [July 8, 2025, 7:25pm UTC](https://forum.keycloak.org/t/how-to-integrate-keycloak-in-iomad-4-5-moodle/30163 "2025-07-08T19:25:16Z")

</div>

Hi , How to integrate KEYCLOAK in IOMAD4.5 Moodle , can you please share reference to follow step to integrate KEYCLOAK.

---

## [How to show auth method selection box](https://forum.keycloak.org/t/how-to-show-auth-method-selection-box/30191)

<div class="topic-metadata">

**Author:** [@warioishere](https://forum.keycloak.org/u/warioishere)\
**Replies:** 1\
**Last updated:** [July 7, 2025, 1:00pm UTC](https://forum.keycloak.org/t/how-to-show-auth-method-selection-box/30191 "2025-07-07T13:00:23Z")

</div>

Hi guys, I am banging my head to find out, how to show auth method selection after usernamen form as seen in this picture here: currently, after I enter my username, it shows me the passwordform and below that That t…

---

## [I am a new learner and I have a small problem with roles](https://forum.keycloak.org/t/i-am-a-new-learner-and-i-have-a-small-problem-with-roles/30169)

<div class="topic-metadata">

**Author:** [@taha](https://forum.keycloak.org/u/taha)\
**Replies:** 2\
**Last updated:** [July 4, 2025, 8:38pm UTC](https://forum.keycloak.org/t/i-am-a-new-learner-and-i-have-a-small-problem-with-roles/30169 "2025-07-04T20:38:40Z")

</div>

I am a new learner, and I have a small problem with roles. This is a simple example application using Keycloak that I am learning from. I am implementing it with both a frontend and a backend. I successfully logged in…

---

## [I use KeyCloak User Federation. Does User Federation support password-free login to LDAP?](https://forum.keycloak.org/t/i-use-keycloak-user-federation-does-user-federation-support-password-free-login-to-ldap/30187)

<div class="topic-metadata">

**Author:** [@wangweiguo1](https://forum.keycloak.org/u/wangweiguo1)\
**Replies:** 4\
**Last updated:** [July 4, 2025, 5:26am UTC](https://forum.keycloak.org/t/i-use-keycloak-user-federation-does-user-federation-support-password-free-login-to-ldap/30187 "2025-07-04T05:26:22Z")

</div>

I use KeyCloak User Federation. Does User Federation support password-free login to LDAP?

---

## [What is "easy theme", mentioned in a devday talk?](https://forum.keycloak.org/t/what-is-easy-theme-mentioned-in-a-devday-talk/30083)

<div class="topic-metadata">

**Author:** [@goranche](https://forum.keycloak.org/u/goranche)\
**Replies:** 4\
**Last updated:** [July 3, 2025, 5:47pm UTC](https://forum.keycloak.org/t/what-is-easy-theme-mentioned-in-a-devday-talk/30083 "2025-07-03T17:47:19Z")

</div>

Just watched the talk @edewit gave at devday 2025, and at 32:23 some “easy theme” is mentioned. From the looks of it, it might be what I’ve been looking for, but I can’t find any information on it :blush: Does anyone h…

---

## [How to dynamically add a user to Keycloak local database from external MySQL during login?](https://forum.keycloak.org/t/how-to-dynamically-add-a-user-to-keycloak-local-database-from-external-mysql-during-login/30171)

<div class="topic-metadata">

**Author:** [@okaydada](https://forum.keycloak.org/u/okaydada)\
**Replies:** 0\
**Last updated:** [June 30, 2025, 2:54pm UTC](https://forum.keycloak.org/t/how-to-dynamically-add-a-user-to-keycloak-local-database-from-external-mysql-during-login/30171 "2025-06-30T14:54:11Z")

</div>

Hello everyone, I’m building a custom UserStorageProvider and I would like to dynamically import users from my existing MySQL database into Keycloak’s local database upon first login. Here’s the logic I want to impleme…

---

## [X509 with a PIN?](https://forum.keycloak.org/t/x509-with-a-pin/30165)

<div class="topic-metadata">

**Author:** [@andy](https://forum.keycloak.org/u/andy)\
**Replies:** 0\
**Last updated:** [June 27, 2025, 4:46pm UTC](https://forum.keycloak.org/t/x509-with-a-pin/30165 "2025-06-27T16:46:19Z")

</div>

Is it possible to Keycloak authentication to use x509 and prompt for a PIN for the cert every time a user logs in? Currently we are using version 21.1. We have configured the authentication to use x509 browser and it se…

---

## [High availability](https://forum.keycloak.org/t/high-availability/30151)

<div class="topic-metadata">

**Author:** [@Joachim](https://forum.keycloak.org/u/Joachim)\
**Replies:** 0\
**Last updated:** [June 25, 2025, 9:26pm UTC](https://forum.keycloak.org/t/high-availability/30151 "2025-06-25T21:26:48Z")

</div>

I am confused. At Multi-site deployments - Keycloak I read Keycloak supports deployments that consist of multiple Keycloak instances that connect to each other using its Infinispan caches; load balancers can distribut…

---

## [No answer on important GitHub issue after one month (We even offered a PR)](https://forum.keycloak.org/t/no-answer-on-important-github-issue-after-one-month-we-even-offered-a-pr/30149)

<div class="topic-metadata">

**Author:** [@tbrodbeck](https://forum.keycloak.org/u/tbrodbeck)\
**Replies:** 1\
**Last updated:** [June 25, 2025, 7:28pm UTC](https://forum.keycloak.org/t/no-answer-on-important-github-issue-after-one-month-we-even-offered-a-pr/30149 "2025-06-25T19:28:27Z")

</div>

Hi! About a month ago I created a very detailed, minimal and reproducible issue detailing a bug in Keycloak that actually affects our users and ultimately leads to user loss: ForkFlowException: Repeated AUTH\_SESSION\_ID …

---

## [How to Disable the Credentials Tab for All User Roles in Keycloak](https://forum.keycloak.org/t/how-to-disable-the-credentials-tab-for-all-user-roles-in-keycloak/30135)

<div class="topic-metadata">

**Author:** [@Dipak](https://forum.keycloak.org/u/Dipak)\
**Replies:** 0\
**Last updated:** [June 23, 2025, 11:10am UTC](https://forum.keycloak.org/t/how-to-disable-the-credentials-tab-for-all-user-roles-in-keycloak/30135 "2025-06-23T11:10:23Z")

</div>

Requirement Statement: I want to disable the “Credentials” tab in Keycloak for all users, including administrators, so that no one can set or reset user passwords directly from the Admin Console. Currently, the Admin Co…

---

## [How to modify the authentication method of ABP from Identity Server 4 to KeyCloak, and how to learn KeyCloak? Is there a learning roadmap available?](https://forum.keycloak.org/t/how-to-modify-the-authentication-method-of-abp-from-identity-server-4-to-keycloak-and-how-to-learn-keycloak-is-there-a-learning-roadmap-available/30127)

<div class="topic-metadata">

**Author:** [@wangweiguo](https://forum.keycloak.org/u/wangweiguo)\
**Replies:** 0\
**Last updated:** [June 23, 2025, 4:44am UTC](https://forum.keycloak.org/t/how-to-modify-the-authentication-method-of-abp-from-identity-server-4-to-keycloak-and-how-to-learn-keycloak-is-there-a-learning-roadmap-available/30127 "2025-06-23T04:44:14Z")

</div>

hi, buddy, I am a .net programmer. Our Company owns many Apps based on Abp vnext, now we want to change Identity Server 4 to KeyCloak, I have successfully debugged KeyCloakDemo(URL: abp-samples/KeycloakDemo at master · a…

---

## [Issue while using React and Keycloak - Continuous Reload of webpage](https://forum.keycloak.org/t/issue-while-using-react-and-keycloak-continuous-reload-of-webpage/30102)

<div class="topic-metadata">

**Author:** [@Ben4764](https://forum.keycloak.org/u/Ben4764)\
**Replies:** 0\
**Last updated:** [June 12, 2025, 11:29am UTC](https://forum.keycloak.org/t/issue-while-using-react-and-keycloak-continuous-reload-of-webpage/30102 "2025-06-12T11:29:41Z")

</div>

I am getting an issue while using React and Keycloak where after I log in through keycloak, it take me to my page then continuously reloads. I have tried other fixes such as setting onLoad to “check-sso”, CheckLoginIfram…

---

## [Keycloak SSO Issue: Invalid Request and clientId=null in Identity Broker](https://forum.keycloak.org/t/keycloak-sso-issue-invalid-request-and-clientid-null-in-identity-broker/30091)

<div class="topic-metadata">

**Author:** [@antoniobt123](https://forum.keycloak.org/u/antoniobt123)\
**Replies:** 0\
**Last updated:** [June 9, 2025, 5:26pm UTC](https://forum.keycloak.org/t/keycloak-sso-issue-invalid-request-and-clientid-null-in-identity-broker/30091 "2025-06-09T17:26:59Z")

</div>

Hello community, I’m setting up Keycloak SSO across two realms with a React application, and I’m consistently getting an Invalid Request error with clientId=null during the Identity Brokering flow. Any insights would be…

---

## [Keycloak admin client sdk 26.0.5 issue](https://forum.keycloak.org/t/keycloak-admin-client-sdk-26-0-5-issue/30081)

<div class="topic-metadata">

**Author:** [@gwx868323](https://forum.keycloak.org/u/gwx868323)\
**Replies:** 0\
**Last updated:** [June 7, 2025, 7:48am UTC](https://forum.keycloak.org/t/keycloak-admin-client-sdk-26-0-5-issue/30081 "2025-06-07T07:48:44Z")

</div>

Dear all, When i started springboot app with Keycloak admin client sdk 26.0.5, it failed with below exception. java.lang.ClassCastException: class org.jboss.resteasy.client.jaxrs.internal.ResteasyClientBuilderImpl cann…

---

## [What are the market shares of Keycloak](https://forum.keycloak.org/t/what-are-the-market-shares-of-keycloak/25321)

<div class="topic-metadata">

**Author:** [@maho01](https://forum.keycloak.org/u/maho01)\
**Replies:** 6\
**Last updated:** [June 5, 2025, 10:42am UTC](https://forum.keycloak.org/t/what-are-the-market-shares-of-keycloak/25321 "2025-06-05T10:42:23Z")

</div>

Hello everyone, I’m looking for IAMs for a thesis and I’m wondering what market share keycloak has. In the basic research I found results like 1.5 percent. Are there any official statistics or maybe even better compar…

---

## [Facing 'Restart login cookie not found' error while login using SAML IDP](https://forum.keycloak.org/t/facing-restart-login-cookie-not-found-error-while-login-using-saml-idp/29679)

<div class="topic-metadata">

**Author:** [@ayyandurai.m](https://forum.keycloak.org/u/ayyandurai.m)\
**Replies:** 1\
**Last updated:** [June 4, 2025, 6:44am UTC](https://forum.keycloak.org/t/facing-restart-login-cookie-not-found-error-while-login-using-saml-idp/29679 "2025-06-04T06:44:37Z")

</div>

Dear Members, Recently we have upgraded keycloak with v26.1.0, but we are facing below error after authentication, we are using SAML IDP. Note : the same flow working with v25.0.6 Have anyone faced similar issue, r…

---

## [Intermittent Timeout Issue with OIDC Authentication in Keycloak v25.0.6 : 'SocketTimeoutException: Read timed out'](https://forum.keycloak.org/t/intermittent-timeout-issue-with-oidc-authentication-in-keycloak-v25-0-6-sockettimeoutexception-read-timed-out/30047)

<div class="topic-metadata">

**Author:** [@ayyandurai.m](https://forum.keycloak.org/u/ayyandurai.m)\
**Replies:** 1\
**Last updated:** [June 1, 2025, 5:55pm UTC](https://forum.keycloak.org/t/intermittent-timeout-issue-with-oidc-authentication-in-keycloak-v25-0-6-sockettimeoutexception-read-timed-out/30047 "2025-06-01T17:55:58Z")

</div>

Hi All, We are currently using Keycloak version 25.0.6, and we are encountering an intermittent issue while authenticating with an OIDC identity provider. Occasionally, we are getting the following error during login: …

---

## [How do I create policies via API](https://forum.keycloak.org/t/how-do-i-create-policies-via-api/15781)

<div class="topic-metadata">

**Author:** [@kaikiat](https://forum.keycloak.org/u/kaikiat)\
**Replies:** 5\
**Last updated:** [May 31, 2025, 6:41am UTC](https://forum.keycloak.org/t/how-do-i-create-policies-via-api/15781 "2025-05-31T06:41:19Z")

</div>

Hello team, How do I create policies (i.e User policies, group policies) programmatically via APIs. I found a apis related to created polices, but none of them seems to create (POST) a policy. GET /{realm}/client-poli…

---

## [\[26.2.4\] http-enabled setting not used](https://forum.keycloak.org/t/26-2-4-http-enabled-setting-not-used/30034)

<div class="topic-metadata">

**Author:** [@mdc\_tux](https://forum.keycloak.org/u/mdc_tux)\
**Replies:** 4\
**Last updated:** [May 27, 2025, 6:48am UTC](https://forum.keycloak.org/t/26-2-4-http-enabled-setting-not-used/30034 "2025-05-27T06:48:06Z")

</div>

Hello, I have set the http-enabled option to true in the config file, but keycloak still won’t start. Only the hint appears that the option should be set. Call: kc.sh --config-file=“/etc/keycloak/config” start --opt…

[Previous page](https://forum.keycloak.org/c/miscellanaeous/1.md?page=1)

[Next page](https://forum.keycloak.org/c/miscellanaeous/1.md?page=3)
