You've been invited into the Kudos (beta program) private group. Chat with others in the program, or give feedback to Atlassian.
View groupJoin the community to find out what other Atlassian users are discussing, debating and creating.
Hi,
We have a Jira Enterprise SSO with Keycloak in production and in Test.
Kyecloak, production-JIRA and test-JIRA are on the same network. In production, everything works without errors, and in the test, when we try to Discover Provider, we get the following error in logs.
at com.nimbusds.openid.connect.sdk.op.OIDCProviderMetadata.resolve(OIDCProviderMetadata.java:1224)
at com.nimbusds.openid.connect.sdk.op.OIDCProviderMetadata.resolve(OIDCProviderMetadata.java:1281)
Caused by: java.io.IOException: Couldn't download OpenID Provider metadata from https://gtlun5303.server.to-sys.de:9443/fm-keycloak/auth/realms/IFM/.well-known/openid-configuration: Status code 403
de.codecentric.atlassian.oidc.commons.oidc.exception.discovery.DiscoveryHttpErrorException: OpenID Connect provider discovery failed: Network error
2020-10-14 23:06:59,313+0200 http-nio-22002-exec-10 ERROR fa003_admin 1386x1046962x1 st7xrx 10.5.120.31,10.16.49.20 /rest/oidc/1.0/discover [d.c.a.o.c.util.servlet.RequestCheckManager] 500 @ rest/oidc/1.0/discover?issuerUrl=https%3A%2F%2Fgtlun5303.server.to-sys.de%3A9443%2Ffm-keycloak%2Fauth%2Frealms%2FM&_=1602709617149: OpenID Connect provider discovery failed: Network error
It seems you are using codecentric's app for OIDC. Maybe you should try to contact them?
I contacted them once and they were very kind and helpful.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Connect with like-minded Atlassian users at free events near you!
Find an eventConnect with like-minded Atlassian users at free events near you!
Unfortunately there are no Community Events near you at the moment.
Host an eventYou're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.