# Keycloak IDP : Invalid username & password Error

**URL:** <https://forum.keycloak.org/t/keycloak-idp-invalid-username-password-error/15435>\
**Category:** Configuring the server\
**Tags:** oidc\
**Created:** [May 9, 2022, 11:50am UTC](https://forum.keycloak.org/t/keycloak-idp-invalid-username-password-error/15435 "2022-05-09T11:50:02Z")\
**Posts on this page:** 16\
**Page:** 1

<div class="post-metadata">

**Author:** ![Nisharunnisa](https://avatars.discourse-cdn.com/v4/letter/n/f6c823/32.png) [@Nisharunnisa](https://forum.keycloak.org/u/Nisharunnisa)\
**Post date:** [May 9, 2022, 11:50am UTC](https://forum.keycloak.org/t/keycloak-idp-invalid-username-password-error/15435/1 "2022-05-09T11:50:02Z")

</div>

Hi Team ,

We have configured Keycloak with IDP ( OIDC Keycloak) . We provided IDP details with First Login flow but after logging into the IDP account we are getting Invalid Username & Password Error .  
We have checked all the configurations but couldn’t find the resolution. Request someone to help me on this issue .

 ![image](https://global.discourse-cdn.com/free1/uploads/keycloak/original/2X/2/2ca550c98ca0b57d4fbd661945949e295ae05b66.png)

Thanks  
Nisharunnisa

---

<div class="post-metadata">

**Author:** ![xgp](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/xgp/32/2589_2.png) [@xgp](https://forum.keycloak.org/u/xgp)\
**Post date:** [May 9, 2022, 12:14pm UTC](https://forum.keycloak.org/t/keycloak-idp-invalid-username-password-error/15435/2 "2022-05-09T12:14:04Z")

</div>

Is it OIDC or SAML? Can you also post the traces that are coming back to Keycloak from your remote IdP? That will enable us to help you debug.

---

<div class="post-metadata">

**Author:** ![Nisharunnisa](https://avatars.discourse-cdn.com/v4/letter/n/f6c823/32.png) [@Nisharunnisa](https://forum.keycloak.org/u/Nisharunnisa)\
**Post date:** [May 10, 2022, 4:47am UTC](https://forum.keycloak.org/t/keycloak-idp-invalid-username-password-error/15435/3 "2022-05-10T04:47:31Z")

</div>

Hi @xgp

Thank you for your reply !  
Able to resolve the issue after updating Authentication Flow for First Broker login flow.  
We can close this issue  
Thanks

---

<div class="post-metadata">

**Author:** ![lamenawuer](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/lamenawuer/32/6061_2.png) [@lamenawuer](https://forum.keycloak.org/u/lamenawuer)\
**Post date:** [June 24, 2022, 2:06pm UTC](https://forum.keycloak.org/t/keycloak-idp-invalid-username-password-error/15435/4 "2022-06-24T14:06:19Z")

</div>

hello @Nisharunnisa , could you please elaborate on what you did exactly on the First Broker Login flow?

Thanks and regards

---

<div class="post-metadata">

**Author:** ![olivierded](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/olivierded/32/7594_2.png) [@olivierded](https://forum.keycloak.org/u/olivierded)\
**Post date:** [February 1, 2023, 2:44pm UTC](https://forum.keycloak.org/t/keycloak-idp-invalid-username-password-error/15435/5 "2023-02-01T14:44:27Z")

</div>

I had the same issue. I solved it by changing the the Cookie (Auth Type) requirement from “required” to “alternative”.

 ![fix_keycloak_auth_flow](https://global.discourse-cdn.com/free1/uploads/keycloak/original/2X/e/e0f080d2acd2a04ab35ca59127156a025104f21f.png)

---

<div class="post-metadata">

**Author:** ![yudiz-Manushi](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/yudiz-manushi/32/10144_2.png) [@yudiz-Manushi](https://forum.keycloak.org/u/yudiz-Manushi)\
**Post date:** [April 3, 2024, 12:09pm UTC](https://forum.keycloak.org/t/keycloak-idp-invalid-username-password-error/15435/6 "2024-04-03T12:09:29Z")

</div>

@olivierded Can you please elaborate how you change Cookie for auth type without login into keycloak.

---

<div class="post-metadata">

**Author:** ![yudiz-Manushi](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/yudiz-manushi/32/10144_2.png) [@yudiz-Manushi](https://forum.keycloak.org/u/yudiz-Manushi)\
**Post date:** [April 3, 2024, 12:34pm UTC](https://forum.keycloak.org/t/keycloak-idp-invalid-username-password-error/15435/7 "2024-04-03T12:34:41Z")

</div>

Hi @Nisharunnisa  
Can you please help me how you exactly resolved issue?  
As I have same issue but i’m not able to login into keycloak so how can I change Authentication Flow for First Broker login flow.

Thanks  
Manushi Mehta

---

<div class="post-metadata">

**Author:** ![jean.silga](https://avatars.discourse-cdn.com/v4/letter/j/f17d59/32.png) [@jean.silga](https://forum.keycloak.org/u/jean.silga)\
**Post date:** [April 3, 2024, 12:47pm UTC](https://forum.keycloak.org/t/keycloak-idp-invalid-username-password-error/15435/8 "2024-04-03T12:47:10Z")

</div>

Use your admin user to log in to the admin console of the master realm so you can make the change.

---

<div class="post-metadata">

**Author:** ![yudiz-Manushi](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/yudiz-manushi/32/10144_2.png) [@yudiz-Manushi](https://forum.keycloak.org/u/yudiz-Manushi)\
**Post date:** [April 3, 2024, 12:54pm UTC](https://forum.keycloak.org/t/keycloak-idp-invalid-username-password-error/15435/10 "2024-04-03T12:54:01Z")

</div>

@jean.silga I’m using admin user but still not able to login into keycloak.  
As Keycloak not provide me atleast username password UI.  
It just show up incorrect username & password.  
Please help me here.

![image](https://global.discourse-cdn.com/free1/uploads/keycloak/original/2X/3/3a450f162c1662879c972254b454679e1e90d262.png)

---

<div class="post-metadata">

**Author:** ![jean.silga](https://avatars.discourse-cdn.com/v4/letter/j/f17d59/32.png) [@jean.silga](https://forum.keycloak.org/u/jean.silga)\
**Post date:** [April 3, 2024, 1:01pm UTC](https://forum.keycloak.org/t/keycloak-idp-invalid-username-password-error/15435/11 "2024-04-03T13:01:46Z")

</div>

As a best practice, it is strongly advised to refrain from altering the master realm in any way except for creating admin users.  
Have you modified the authentication flow of the master realm?

---

<div class="post-metadata">

**Author:** ![yudiz-Manushi](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/yudiz-manushi/32/10144_2.png) [@yudiz-Manushi](https://forum.keycloak.org/u/yudiz-Manushi)\
**Post date:** [April 3, 2024, 1:15pm UTC](https://forum.keycloak.org/t/keycloak-idp-invalid-username-password-error/15435/12 "2024-04-03T13:15:48Z")

</div>

@jean.silga Yes I have modified authentication flow for master realm.  
Is there anyway to get back into normal situation?

---

<div class="post-metadata">

**Author:** ![jean.silga](https://avatars.discourse-cdn.com/v4/letter/j/f17d59/32.png) [@jean.silga](https://forum.keycloak.org/u/jean.silga)\
**Post date:** [April 3, 2024, 1:35pm UTC](https://forum.keycloak.org/t/keycloak-idp-invalid-username-password-error/15435/13 "2024-04-03T13:35:33Z")

</div>

I don’t know how to go back to normal situation without access to the master realm.

---

<div class="post-metadata">

**Author:** ![mbonn](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/mbonn/32/5755_2.png) [@mbonn](https://forum.keycloak.org/u/mbonn)\
**Post date:** [April 4, 2024, 8:39am UTC](https://forum.keycloak.org/t/keycloak-idp-invalid-username-password-error/15435/14 "2024-04-04T08:39:59Z")

</div>

You could of course simply restore the backup of your database.

---

<div class="post-metadata">

**Author:** ![rajatcing](https://avatars.discourse-cdn.com/v4/letter/r/67e7ee/32.png) [@rajatcing](https://forum.keycloak.org/u/rajatcing)\
**Post date:** [July 8, 2024, 12:26pm UTC](https://forum.keycloak.org/t/keycloak-idp-invalid-username-password-error/15435/15 "2024-07-08T12:26:32Z")

</div>

I have the same issue, how can I restore backup here

---

<div class="post-metadata">

**Author:** ![dasniko](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/dasniko/32/2969_2.png) [@dasniko](https://forum.keycloak.org/u/dasniko)\
**Post date:** [July 8, 2024, 2:56pm UTC](https://forum.keycloak.org/t/keycloak-idp-invalid-username-password-error/15435/16 "2024-07-08T14:56:18Z")

</div>

This is not a Keycloak issue, this is your database responsibility. See the docs of your database to get more info about this.

---

<div class="post-metadata">

**Author:** ![rajatcing](https://avatars.discourse-cdn.com/v4/letter/r/67e7ee/32.png) [@rajatcing](https://forum.keycloak.org/u/rajatcing)\
**Post date:** [July 8, 2024, 3:07pm UTC](https://forum.keycloak.org/t/keycloak-idp-invalid-username-password-error/15435/17 "2024-07-08T15:07:00Z")

</div>

wdym by database responsibility, can you please explain a bit more
