2

I want to setup a SSO solution using Keycloak 10.0.2 as the Identity Provider. The first application I want to setup is AWS.

I followed this tutorial to enable Keycloak to sign me in using SAML. I noticed, that this tutorial is guiding me to download the “SAML Metadata IDPSSODescriptor” from the client's "Installation"-Tab. However, I can only choose "SAML Metadata SPSSODescriptor".

In AWS, I entered the name of my realm as "Provider Name" and imported the SPSSODescriptor. This led to the following error: SAML Providers must reference at least one SAML assertion issuer.

David Medinets
  • 113
  • 7
user540468
  • 152
  • 1
  • 2
  • 10

2 Answers2

3

In downloaded xml file change SPSSODescriptor to IDPSSODescriptor for both opening and closing tags. Also entityID should be "https://KEYCLOAK-URL/auth/realms/YOUR-REALMS-NAME"

Aftandil Kurolesov
  • 31
  • 2
0

Use the command:

wget https://KEYCLOAK-URL/auth/realms/YOUR-REALMS-NAME/protocol/saml/descriptor

and

upload descripter
kenlukas
  • 2,886
  • 2
  • 14
  • 25
jobycxa
  • 101