Keycloak SSO

Collapse
X
 
  • Time
  • Show
Clear All
new posts

  • Jirvil
    replied
    Necroposting forever!
    For all those who googled this page and are setting up the Espoсrm with Keycloak, I'm providing my (working!) settings.
    Last edited by Jirvil; 02-18-2025, 11:21 AM.

    Leave a comment:


  • estehr
    replied
    Originally posted by murray99
    I will document the settings that I end up with for others to use.
    Hi murray99,

    did you succeed with the SSO? I just started the project but w/o success. I see the logon screen but afterwards the login failed. In KC there's no error but in Espo there's a "invalid credentials". Do they need to match in KC and Espo?

    Leave a comment:


  • murray99
    replied
    Thanks Yuri.
    I'm still getting my head around Connect ID. I will document the settings that I end up with for others to use.
    Thanks again

    Leave a comment:


  • yuri
    replied
    See https://github.com/espocrm/espocrm/issues/2786 and https://docs.espocrm.com/administration/oidc/ in the Details list (see client_secret_jwt and private_key_jwt methods are not supported​).

    Leave a comment:


  • murray99
    replied
    [2023-10-07 16:34:27] ERROR: OIDC: Bad token request.; Status: 400; Response: {"error":"invalid_client","error_description":" Par ameter client_assertion_type is missing"}
    [2023-10-07 16:34:27] ERROR: (0) GET /App/user; line: 249, file: [root_folder]\application\Espo \Core\Authentication\Oidc\Login.php​

    Leave a comment:


  • yuri
    replied
    Would be helpful if you provided more details about the error. From Espo log file, from the browser console, a screenshot.

    Leave a comment:


  • murray99
    started a topic Keycloak SSO

    Keycloak SSO

    Has anyone successfully set up SSO with Keycloak. I managed to get KC to display a login screen and create a session, but the Espo page seems to be raising an error.
    has anyone got some detail about which URL exactly I shoudl be setting up between Espo and the Keycloak client settings?
    Thanks
    M
Working...