Keycloak redirects to ucs-sso

[riess82]

Hi all.

I finally migrated a test-server from 5.0 to 5.2.
Not using SSO, but want to have it ready anyway. I thought I had followed the migration guide, but pretty sure I missed something. Or something was misconfigured already before.

System
Univention: 5.2-1 errata90
Keycloak: 26.1.4-ucs2

I open the portal in my browser and click on “Anmelden (Single Sign-On)”. The link points to https://FQDN/univention/saml/?location=/univention/portal/

The browser opens https://ucs-sso-ng.DOMAIN/realms/ucs/protocol/saml?SAMLRequest=… and tells me that I will be forwarded. The browser continues to https://ucs-sso.DOMAIN/univention/saml/ which I expect is wrong.

Any help would be very welcome.

[dzidek23]

Hey,

did you search the forum? Is that the issue you are facing?

Keycloak Login not enforced - Wrong Config or Security Issue?

Hi, we have the latest UCS version “5.2-1 errata82” and keycloak 26.1.4.-ucs2 installed. We have done the configuration according to the documentation: https://docs.software-univention.de/keycloak-app/latest/configuration.html#use-keycloak-for-login-to-univention-portal The portal icon for the UCS login is disabled, only the SSO login is enabled. [image] For domain admins we want to enforce 2FA and it is configured as described in the documentation: https://docs.software-univention.de/ke…

[riess82]

Hi dzidek.
Thanks for your quick reply, but that does not sound like the same problem. I did search the forums plus google.
Maybe the problem really is from some old never-configured SAML.

I would be fine with wiping old saml stuff plus keycloak and start fresh, as there is nothing I have done with either of them so far, if that gets me back on track.