OIDC Keycloak #2896

Closed
opened 2026-02-05 05:39:31 +03:00 by OVERLORD · 5 comments
Owner

Originally created by @mv-yurchenko on GitHub (Jul 10, 2022).

Attempted Debugging

  • I have read the debugging page

Searched GitHub Issues

  • I have searched GitHub for the issue.

Describe the Scenario

Added Keycloak as OIDC provider. Got the following error.
image

My KK config
image

Exact BookStack Version

latest

Log Content

No response

PHP Version

No response

Hosting Environment

Docker

Originally created by @mv-yurchenko on GitHub (Jul 10, 2022). ### Attempted Debugging - [X] I have read the debugging page ### Searched GitHub Issues - [X] I have searched GitHub for the issue. ### Describe the Scenario Added Keycloak as OIDC provider. Got the following error. ![image](https://user-images.githubusercontent.com/33545848/178139524-7c15b20e-8295-4fb4-8f44-845c1e2fbb38.png) My KK config <img width="1021" alt="image" src="https://user-images.githubusercontent.com/33545848/178139534-bc5707a5-4b2e-4fbf-a098-2dc3ccce933a.png"> ### Exact BookStack Version latest ### Log Content _No response_ ### PHP Version _No response_ ### Hosting Environment Docker
OVERLORD added the 🐕 Support label 2026-02-05 05:39:31 +03:00
Author
Owner

@ssddanbrown commented on GitHub (Jul 10, 2022):

Hi @mv-yurchenko,

This error usually means the configured OIDC_ISSUER does not exactly match that found in the response at your OIDC autodiscovery endpoint (<issuer>/.well-known/openid-configuration). Check the value there and ensure both exactly match, for the full text value.

@ssddanbrown commented on GitHub (Jul 10, 2022): Hi @mv-yurchenko, This error usually means the configured `OIDC_ISSUER` does not exactly match that found in the response at your OIDC autodiscovery endpoint (`<issuer>/.well-known/openid-configuration`). Check the value there and ensure both exactly match, for the full text value.
Author
Owner

@mv-yurchenko commented on GitHub (Jul 11, 2022):

Solved with adding new tls to issuer.

@mv-yurchenko commented on GitHub (Jul 11, 2022): Solved with adding new tls to issuer.
Author
Owner

@mv-yurchenko commented on GitHub (Jul 11, 2022):

@ssddanbrown thanks for help.
I've got 1 more question.
I need to pass admin privileges to bookstack from keycloak, is any docs about this?

@mv-yurchenko commented on GitHub (Jul 11, 2022): @ssddanbrown thanks for help. I've got 1 more question. I need to pass admin privileges to bookstack from keycloak, is any docs about this?
Author
Owner

@ssddanbrown commented on GitHub (Jul 11, 2022):

@mv-yurchenko Ah, mentioned it in the other thread you commented on, but there is no current group/role sync for OIDC usage.
I'm taking feedback in https://github.com/BookStackApp/BookStack/issues/3004 to get an idea of data format for future support.

@ssddanbrown commented on GitHub (Jul 11, 2022): @mv-yurchenko Ah, mentioned it in the other thread you commented on, but there is no current group/role sync for OIDC usage. I'm taking feedback in https://github.com/BookStackApp/BookStack/issues/3004 to get an idea of data format for future support.
Author
Owner

@ssddanbrown commented on GitHub (Jul 11, 2022):

Since the original matter is solved I'll close this off.

@ssddanbrown commented on GitHub (Jul 11, 2022): Since the original matter is solved I'll close this off.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/BookStack#2896