Hello, Does KeyCloak offer any support to broker with oAuth2 identity providers? I’m not using a social provider. I would like to KeyCloak to use my application which supports oAuth2.0 implementation as an identity provider. I came across this thread from last year - Brokering non-OIDC oAuth 2.0 i…

[image] Brokering non-OIDC oAuth 2.0 identities Getting advice Most “plain” OAuth2 IdPs are likely configurable using Keycloak’s generic OIDC IdP type. Post here which one you’re trying to implement with a link to the developer docs for it, and I’ll take a crack at a confi…

Thanks for getting back @xgp . Unfortunately they barely have any documentation for the oauth implementation. It is an on-premise hosted CMS called Mura CMS - Enterprise Content Management Solutions | Mura Software - Mura Software . I have the authorization, token and userinfo urls if that is any help…

Have you tried setting it up as an OIDC IdP? Plug in the authorization, token and userinfo URLs, get the clientId and clientSecret, and then try to log in. [Screenshot from 2023-02-03 20-22-15]

I did give that a try. But keycloak returns the error - “No token from server”. I’m assuming it is expecting an id_token instead of the access_token that is being sent.

Still might be something you can work around with configuration. Couple of thoughts. Turn on Keycloak DEBUG logging, to see if you can get a better sense of what’s happening internally If you can, since you are running Mura locally, run it over HTTP and use something like Wireshark to look at the …

Thank you @xgp ! I appreciate your responses and helping me with this. I’ll give your steps a try and get back to you with more specifics. Also I have access to the Mura code so I can modify the output it returns if needed.

From the info you mentioned here, this all sounds very strange. Keycloak can‘t work with a pure OAuth2 provider, as OAuth2 doesn‘t provide identities. This only OIDC will provide (that‘s the reason OIDC was invented). But OAuth2 doesn‘t have a „userinfo“ endpoint, so this is strange that your prov…

Support for oAuth2.0 identity provider

Securing applications

xgp February 3, 2023, 5:02pm 2

It’s largely dependent on the provider. As I said in my response to the other question, if you can post the documentation for the one you are trying to integrate, we can likely help you with the configuration and help you determine if it’s possible.

Topic		Replies	Views
Brokering non-OIDC oAuth 2.0 identities Getting advice identity-brokering , oidc	8	2511	June 24, 2021
OAuth2 IDP instead of OIDC Configuring the server authentication , identity-brokering , oidc	1	1324	October 3, 2020
Using Keycloak as a broker for Oauth 2.0 IdP (Mercado Libre) Getting advice authentication , identity-brokering	1	969	August 26, 2021
IdentityBrokerException: No token from server Getting advice identity-brokering , oidc	5	2914	July 12, 2022
Problem with custom identity provider oauth2 Configuring the server	1	786	March 19, 2021

Support for oAuth2.0 identity provider

Related topics