Content  of  the  file  is  layers=keycloak

Created  under Wildfly_Home/Modules.

I have just removed the file and  run that jboss.cli command  but still I show  the  error

./jboss-cli.sh --file=adapter-elytron-install-saml.cli --connect --controller=0.0.0.0:xxxx

Authenticating against security realm: ManagementRealm

Username: xxxx

Password:

{

    "outcome" => "failed",

    "failure-description" => "WFLYCTL0310: Extension module org.keycloak.keycloak-saml-adapter-subsystem not found",

    "rolled-back" => true

}

I actually created  layers.conf  file by using the below  doc  :

[KEYCLOAK-5185] WildFly Overlay not working due to missing layers.conf - JBoss Issue Tracker

Its created  under Wildfly_Home/Modules

Content  is  layers=keycloak.

But now removed  that .conf  file

Ran  below  jboss.cli command  .  But  still  showing the error

./jboss-cli.sh --file=adapter-elytron-install-saml.cli --connect --controller=0.0.0.0:xxxx

Authenticating against security realm: ManagementRealm

Username: xxxx

Password:

{

    "outcome" => "failed",

    "failure-description" => "WFLYCTL0310: Extension module org.keycloak.keycloak-saml-adapter-subsystem not found",

    "rolled-back" => true

}

Hi Claudio,

I  have  installed  keycloak saml adapters and unzipped  the  file and  ran jboss-cli.sh  and it was  sucessful this  time :

Not  sure  what I have to do  for the next step.

{

    "outcome" => "success",

    "result" => [("keycloak-saml" => "1.1.0")]

}

{

    "outcome" => "success",

    "response-headers" => {

        "operation-requires-reload" => true,

        "process-state" => "reload-required"

    }

}

{

    "outcome" => "success",

    "response-headers" => {"process-state" => "reload-required"}

}

{

    "outcome" => "success",

    "response-headers" => {"process-state" => "reload-required"}

}

{

    "outcome" => "success",

    "response-headers" => {"process-state" => "reload-required"}

}

{

    "outcome" => "success",

    "response-headers" => {"process-state" => "reload-required"}

}

{

    "outcome" => "success",

    "response-headers" => {"process-state" => "reload-required"}

}

{

    "outcome" => "success",

    "response-headers" => {"process-state" => "reload-required"}

}

{

    "outcome" => "success",

    "response-headers" => {"process-state" => "reload-required"}

I have seen that document.

I have configured  IDP related info on keycloak admin console

and insatlled Keycloak saml adapters on wildfly server.

Now I have to do  application related  configurations  for single sign on .

No Idea  where  to star.

Do I have to  take any file  from keycloak  admin console  and copy that  file  to  wildfly server ?

Or  any other  stuff  to do

Hello Miranda,

https://www.keycloak.org/docs/2.5/securing_apps/topics/oidc/java/jboss-adapter.html

Do you know  that this  the section 4.2.1.2 is a part of single sign on configuration ?

Thanks,

Lily

that's  what where I stuck, securing app  by using the keycloak saml adapters .

Thanks  for sharing  the doc.

I wanna  take this option "Securing WARs via Keycloak SAML Subsystem"

we need  to configure this  instance's .xml file

<extensions>
  <extension module="org.keycloak.keycloak-saml-adapter-subsystem"/>
</extensions>

<profile>
  <subsystem xmlns="urn:jboss:domain:keycloak-saml:1.1">
   <secure-deployment name="WAR MODULE NAME.war">
   <SP entityID="APPLICATION URL">
  ...
   </SP>
   </secure-deployment>
  </subsystem>
</profile>

From  above  content  which is given in document  . I did not get this  thing  from the lines "

The secure-deployment name attribute identifies the WAR you want to secure. Its value is the module-name defined in web.xml with .war appended."

Do I have to put like this  </secure-deployment> "sample.war" </secure-deployment>   or </secure-deployment> "sample.war"

Sample.war is the  deoplyment  file which I have deployed on wildfly instance .

Also  above  is 1st doubt and my other doubts  on this

You do not have to crack open a WAR to secure it with Keycloak. Alternatively, you can externally secure it via the Keycloak SAML Adapter Subsystem. While you don’t have to specify KEYCLOAK-SAML as an auth-method, you still have to define the security-constraints in web.xml. You do not, however, have to create a WEB-INF/keycloak-saml.xml file. This metadata is instead defined within the XML in your server’s domain.xml or standalone.xml subsystem configuration section.

(2nd doubt)

(2)do I have to define security-constraints in web.xml ?

(2.a) :in that case there is no need to create keycloak-saml.xml file ?

(2.b)If I have to create keycloak-saml.xml file  from where  and what content  needs  to be  in this  keycloak-saml.xml  file .

(3rd doubt)

(3)Which metadata  is is already defined in standalone.xml file of wildfly instance ? 

(3.a)As  its  already defined there is no need  to definesecurity-constraints in web.xml?

(3.b)there is no need to create  the keycloak.xml file under WEB-INF  folder

Hello Claudio,

When I was trying to open the keycloak admin  console

I'm getting below  error

This site can’t be reached

ERR_CONNECTION_TIMED_OUT