# Keycloak saml redirection issue for https

**URL:** <https://forum.keycloak.org/t/keycloak-saml-redirection-issue-for-https/24401>\
**Category:** Getting advice\
**Tags:** authentication, saml\
**Created:** [February 5, 2024, 10:37am UTC](https://forum.keycloak.org/t/keycloak-saml-redirection-issue-for-https/24401 "2024-02-05T10:37:49Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Pavan1507](https://avatars.discourse-cdn.com/v4/letter/p/3bc359/32.png) [@Pavan1507](https://forum.keycloak.org/u/Pavan1507)\
**Post date:** [February 5, 2024, 10:37am UTC](https://forum.keycloak.org/t/keycloak-saml-redirection-issue-for-https/24401/1 "2024-02-05T10:37:49Z")

</div>

I am using keycloak as an idp for my springboot api (runnign in 8080 port) with saml security. for http it is working fine. for https after authentication it is redirecting to keycloak (running 8443/login) idp instead of returning back to my API.

my configurations arebelow. Can anyone please suggest what changes I need to make? It is working perfectly for HTTP.

{  
“clientId”: “**",  
“name”: "**_",  
“description”: “”,  
“rootUrl”: “[https://localhost:8080](https://localhost:8080)”,  
“adminUrl”: “”,  
“baseUrl”: “”,  
“surrogateAuthRequired”: false,  
“enabled”: true,  
“alwaysDisplayInConsole”: false,  
“clientAuthenticatorType”: “client-secret”,  
“redirectUris”: [  
"/saml/_”  
],  
“webOrigins”: ,  
“notBefore”: 0,  
“bearerOnly”: false,  
“consentRequired”: false,  
“standardFlowEnabled”: true,  
“implicitFlowEnabled”: false,  
“directAccessGrantsEnabled”: true,  
“serviceAccountsEnabled”: false,  
“publicClient”: true,  
“frontchannelLogout”: true,  
“protocol”: “saml”,  
“attributes”: {  
“saml.assertion.signature”: “true”,  
“saml.force.post.binding”: “true”,  
“saml\_single\_logout\_service\_url\_post”: “/saml/logout”,  
“saml.encrypt”: “false”,  
“saml\_assertion\_consumer\_url\_post”: “/saml/SSO”,  
“saml.server.signature”: “true”,  
“saml.server.signature.keyinfo.ext”: “false”,  
“saml.signing.certificate”: “hidden”,  
“saml.artifact.binding.identifier”: “hidden”,  
“saml.artifact.binding”: “false”,  
“saml.signature.algorithm”: “RSA\_SHA256”,  
“saml\_force\_name\_id\_format”: “false”,  
“saml.server.signature.keyinfo$xmlSigKeyInfoKeyNameTransformer”: “KEY\_ID”,  
“saml.client.signature”: “false”,  
“saml.force.name.id.format”: “false”,  
“saml.authnstatement”: “true”,  
“display.on.consent.screen”: “false”,  
“saml\_name\_id\_format”: “email”,  
“saml.signing.private.key”: “hidden”,  
“saml.allow.ecp.flow”: “false”,  
“saml\_signature\_canonicalization\_method”: “[Exclusive XML Canonicalization Version 1.0](http://www.w3.org/2001/10/xml-exc-c14n#)”,  
“saml.onetimeuse.condition”: “false”  
},  
“authenticationFlowBindingOverrides”: {},  
“fullScopeAllowed”: true,  
“nodeReRegistrationTimeout”: -1,  
“defaultClientScopes”: [  
“role\_list”  
],  
“optionalClientScopes”: ,  
“access”: {  
“view”: true,  
“configure”: true,  
“manage”: true  
}  
}

#redirection issue #https

---

<div class="post-metadata">

**Author:** ![Pavan1507](https://avatars.discourse-cdn.com/v4/letter/p/3bc359/32.png) [@Pavan1507](https://forum.keycloak.org/u/Pavan1507)\
**Post date:** [February 5, 2024, 10:39am UTC](https://forum.keycloak.org/t/keycloak-saml-redirection-issue-for-https/24401/2 "2024-02-05T10:39:58Z")

</div>

i referred this link and tried those changes still i am facing same issue

> [@Keycloak SAML authentication redirection](https://forum.keycloak.org/t/keycloak-saml-authentication-redirection/12545):
>
> Hello, I’m using keycloak to authenticate users through a web browser using SAML. The authentication works fine but redirection doesn’t. The SAML request XML has the AssertionConsumerServiceURL attribute which keycloak is using to redirect. But instead of using the AssertionConsumerServiceURL attribute host name it uses the keycloak host name. For example: Keycloak host name: authserver dot hostname dot com Client host name: client dot hostname dot com AssertionConsumerServiceURL: [https://cl…](https://client.hostname.com/users/sessions/saml_sessions?provider_id=8)