Assistance with Keycloak OIDC Configuration for Coder #16262
-
|
Hello everyone, I would like to extend my gratitude to the developers for creating such an amazing product. I’ve decided to use it in my home lab, but unfortunately, I’m having trouble configuring Keycloak OIDC integration. Here’s my setup: Keycloak is deployed on a separate server. I’m trying to configure the environment variables in the docker-compose file for Coder as follows (note: I’ve converted the variable names to UPPERCASE for consistency): CODER_OIDC_ISSUER_URL: "https://keycloak.local/realms/homelab/.well-known/openid-configuration"
CODER_OIDC_CLIENT_ID: "coder-app"
CODER_OIDC_CLIENT_SECRET: "secret"
CODER_OIDC_SIGN_IN_TEXT: "sign in with keycloak"
CODER_OIDC_IGNORE_EMAIL_VERIFIED: "true"However, this configuration isn’t working, and I’m encountering the following error in the logs:
Could you please advise on how to properly configure this integration? Additional Information:
Thank you in advance for your help! Best regards |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
|
Good day! Just for reference, I managed to configure OIDC with Keycloak through trial and error. I came across a configuration example for Semaphore UI (https://docs.semaphoreui.com/administration-guide/openid/keycloak/) and decided to try the same approach with Coder. And it worked. Here’s the working configuration: CODER_OIDC_ISSUER_URL: "https://keycloak.local/realms/homelab"
CODER_OIDC_CLIENT_ID: "coder-app"
CODER_OIDC_CLIENT_SECRET: "secret"
CODER_OIDC_SIGN_IN_TEXT: "Sign in with Keycloak"
CODER_OIDC_IGNORE_EMAIL_VERIFIED: "true"I hope this will be helpful to someone :) |
Beta Was this translation helpful? Give feedback.
Good day!
Just for reference, I managed to configure OIDC with Keycloak through trial and error. I came across a configuration example for Semaphore UI (https://docs.semaphoreui.com/administration-guide/openid/keycloak/) and decided to try the same approach with Coder. And it worked.
Here’s the working configuration:
I hope this will be helpful to someone :)