nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Keycloak authentification APS

narjisseatos

Hi,

I have a problem when I try to connect keycloak to APS

keycloak version: 3.4.3
APS version: 1.9.01

ACS version : 6.1

«localhost:9080/activiti-app» redirects to :

http://localhost:8080/auth/realms/alfresco-dbp/protocol/openid-connect/auth?response_type=code&client_id=alfresco-client&redirect_uri=http://localhost:9080/activiti-app%2Fsso%2Flogin&state=e1f89ef2-25e3-4ea4-b3f4-aac61e6e5a57&login=true&scope=openid

then, after authentication, to

http://localhost:9080/activiti-app/sso/login?state=dcc9f547-19d4-44ce-b5a5-745e1ab233f9&session_state=fe20faed-42b6-4dd7-b20a-49809b9df49f&code=eyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..SFQ6armG0bv5nEyGxNlipg.qP_oJCtHKUdOy4E_2QFlzLv-bBl88mjqjzcaxmncQqwk0yiLvSzIHSg4OtwmPTox7QiRQPlj2bLlYGAKLABPkbOexwk8bc5kqGQSgrA1eat3kXIIFa5Ia0sIkzasRnrzBFRKjRW4XB7_nnrvYo0CEwHlVUoawzx_8hEF2hCH8-PDhqohd-RrRDI05os3GQN2OD4aKL1RzQektB36imEc1_-mcbejoRV_suwpbfkMNw6hF4UuEdbxGkQamYs7DwD1.Klpwxzomlku6dcbSvhXo0w Keycloack APS error

activiti-identity-service.properties

# --------------------------------
# IDENTITY SERVICE (i.e. Keycloak)
# --------------------------------

keycloak.enabled=true
keycloak.realm=alfresco-dbp
keycloak.auth-server-url=http://localhost:8080/auth
keycloak.ssl-required=none
keycloak.resource=alfresco-client
keycloak.principal-attribute=email
# set to true if access type is public for this client in keycloak
keycloak.public-client=true
keycloak.always-refresh-token=true
keycloak.autodetect-bearer-only=true
keycloak.token-store=cookie
keycloak.enable-basic-auth=true

alfresco-global.properties

jodconverter.enabled=true

# Identity Service (i.e. Keycloak)
# --------------------------------

# UNCOMMENT TO ENABLE Identity Service (i.e. Keycloak) for ACS
authentication.chain=identity-service1:identity-service,alfrescoNtlm1:alfrescoNtlm
identity-service.authentication.enabled=true
identity-service.enable-basic-auth=true
identity-service.authentication.defaultAdministratorUserNames=admin
identity-service.authentication.validation.failure.silent=false
identity-service.auth-server-url=http://localhost:8080/auth
identity-service.realm=alfresco-dbp
identity-service.resource=alfresco-client
identity-service.public-client=true
identity-service.ssl-required=none

Bassam Al-Sarori

alfresco-global.properties.zip

activiti-identity-service.properties.zip

docker-compose.yml.zip

Find more posts tagged with

Alfresco Process Services

Comments

bassam_al-saror

Looks like APS isn't able to connect to Keycloak. Are they both running on different containers?

narjisseatos

Thanks,

Yes, different containers

bassam_al-saror

The Keycloak URL isn't correct it should point to the Keycloak instance. I'm not sure how do it but you look into how to make the Keycloak accessible to APS. I guess docker has a way to make two containers accessible to each other.

keycloak.auth-server-url=http://localhost:8080/auth

narjisseatos

The Keycloak URL is correct when i call this URL

«localhost:9080/activiti-app» redirects me to :

And the two dockers are accessible to each other

I don't understand your response

adrianmiramar

I dont know if the problem was the same or similiar but in my case I had to set the "Require SSL" to NONE on the REALM, because the URL validation token has to be SSL and I has a self signed certificate

I don't understand why the error is 404 (I think this is wrong because is very confusing) but the real issue is for conection between APS and the Keycloak.