Hi Team,
I am using Camunda 7 + Spring Boot + Keycloak. Can I get any simple example for this. I am new to Key cloak. I have good experience in Camunda 7, Spring boot. If any git repo that will be helpful.
I followed this: GitHub - camunda-community-hub/camunda-platform-7-keycloak: Camunda Keycloak Identity Provider Plugin . I created my realm with the name as camunda-platform. But when I try to run it, I am getting below exception in my camunda application.
Key cloak is running in : 8080
Camunda Spring Boot is running : 8081
Exception:
Caused by: java.lang.IllegalArgumentException: Unable to resolve Configuration with the provided Issuer of “http://localhost:8080/auth/realms/camunda-platform”
Below is the configuration:
camunda.bpm:
authorization:
enabled: true
plugin.identity.keycloak:
keycloakIssuerUrl: http://localhost:8080/auth/realms/camunda-platform
keycloakAdminUrl: http://localhost:8080/auth/admin/realms/camunda-platform
clientId: camunda-identity-service
clientSecret: 5wRPoysOKUCVfsBnT1KDJG1YmcxMF4Ik
useEmailAsCamundaUserId: true
administratorGroupName: camunda-admin
spring.security.oauth2:
client:
registration:
keycloak:
provider: keycloak
client-id: camunda-identity-service
client-secret: 5wRPoysOKUCVfsBnT1KDJG1YmcxMF4Ik
authorization-grant-type: authorization_code
redirect-uri: “{baseUrl}/{action}/oauth2/code/{registrationId}”
scope: openid, profile, email
provider:
keycloak:
issuer-uri: http://localhost:8080/auth/realms/camunda-platform
authorization-uri: http://localhost:8080/auth/realms/camunda-platform/protocol/openid-connect/auth
user-info-uri: http://localhost:8080/auth/realms/camunda-platform/protocol/openid-connect/userinfo
token-uri: http://localhost:8080/auth/realms/camunda-platform/protocol/openid-connect/token
jwk-set-uri: http://localhost:8080/auth/realms/camunda-platform/protocol/openid-connect/certs
# set user-name-attribute one of:
# - sub → default; using keycloak ID as camunda user ID
# - email → useEmailAsCamundaUserId=true
# - preferred_username → useUsernameAsCamundaUserId=true
user-name-attribute: email