Open c0c0n3 opened 1 year ago
As a side note, Datasheets works flawlessly with a similar setup, except I think the OIDC client is defined in RAMP
I have just retested this and the problem is still there, I will start investigating it.
I will look into how the authentication is managed however first assumption would be some issue with the keycloak integration
Have not had time to continue with this as there is some extraction work required for the datasheets tool
Could someone from RAMP not confirm the configuration of this?
While trying to reproduce this issue, I got the following error:
ERR_TOO_MANY_REDIRECTS
I've been redirected to https://kitt4sme.collab-cloud.eu/aq/sso/login?state=a2c2c6ed-0932-4b54-8fbd-bdfa83693cb1&session_state=74335a47-a4ae-4346-be53-d806ac6fa6eb&code=96abe796-915b-4e80-b5d6-f0f59e75bc04.74335a47-a4ae-4346-be53-d806ac6fa6eb.750cae43-f2b4-4082-8119-bdcf8cccc427 after the RAMP login.
Here is my configuration:
OS: Ubuntu 22.04 Browser: Chrome -- version 117.0.5938.88 (Official Build) (64-bit) Browser mode: Incognito User: janedoe@supsi.ch
Just tested SSO with digital datasheets and works fine. The redirection happens within the collab-cloud server. Have you set up the SSO with Keycloak client?
this is the current configuration we use for AQ:
- name: KEYCLOAK_REALM
value: "kitt4sme"
- name: KEYCLOAK_AUTH_SERVER_URL
value: "https://kitt4sme.collab-cloud.eu/auth"
- name: KEYCLOAK_RESOURCE
value: "aq"
- name: KEYCLOAK_CREDENTIALS_SECRET
valueFrom:
secretKeyRef:
name: oidc-clients
key: aq.oidc.client.secret
RAMP is registered as an Identity Provider in Keycloak
The SSO between the Keycloaks look fine, this looks like an issue on the integration of the app to your local keycloak
Please verify if the problem still exists in periodic manner to see if it reappers
Describe the bug
307 configured AQ for SSO with RAMP. It seems to work fine in some cases but in others we get a nasty redirect to a dead-end URL after login.
To Reproduce
Steps to reproduce the behavior:
man@test.com
and password the RAMP guys gave you0
: https://kitt4sme.collab-cloud.eu:0/aq/sso/login?state=1f42469e-67ad-4b85-9025-8356ff089d16&session_state=447c1893-ce2a-4951-9b85-b42c130155f7&code=96caf1ac-d256-4e12-8ebf-9743cca1a94a.447c1893-ce2a-4951-9b85-b42c130155f7.750cae43-f2b4-4082-8119-bdcf8cccc427Expected behavior
If you aren't logged into RAMP and browse to AQ, you should get redirected to the RAMP login form. After successfully logging into RAMP, you should get redirected back to AQ's start page.
Additional context
At the moment KITT4SME's Keycloak has a
kitt4sme
realm, RAMP as an identity provider for that realm, and an OIDC client for AQ still in the same realm.The identity provider got configured as follows.
kitt4sme_testing
, Client Secret:<what the RAMP guys gave you>
The auth flow was configured as follows.
AQ's OIDC client was configured with the following fields: