I’m trying to install a self managed version of Camunda Platform on OpenShift with combined ingress setup using the Camunda Helm Charts.
There are some issues, one of which is that I cannot login to optimize with the demo account.
Strange enough, the login to operate works well.
Operate Workflow (works fine):
https://<acme.host>/operate
→ https://<acme.host>/auth/realms/camunda-platform/protocol/openid-connect/auth?client_id=operate&redirect_uri=<urlencoded.acme.host>%2Foperate%2Fidentity-callback&response_type=code&scope=openid+email&state=
→ login works fine
Optimize Workflow (redirect url missing):
https://<acme.host>/optimize
→ https:/<acme.host>/auth/realms/camunda-platform/protocol/openid-connect/auth?client_id=optimize&redirect_uri=&response_type=code&scope=openid+email&state=
So calling the optimize web application without authentication seems to redirect me to the correct authentication realm, but fails to pass the correct redirect URL. Therefore the login page shows “Invalid parameter: redirect_uri”
In the Keycloak Installation I can see both a client for “optimize” and “operate”.
“optimize” has Valid Redirect URI: https://<acme.host>/optimize/api/authentication/callback
“operate” has Valid Redirect URI: https://<acme.host>/operate/identity-callback
Any ideas, what I’m doing wrong?