Problem: Unexpected error when handling authentication request to identity provider

[fdavid]

Problem

After removing Keycloak and reinstalling it, you might be facing the error message Unexpected error when handling authentication request to identity provider. when trying to access the Keycloak admin console.

Explanation

When upgrading the Keycloak app, the command univention-keycloak upgrade-config is performed. It fixes the provider configuration in the “User federation”. This is done because of a change in a Keycloak version which broke the “Connection and authentication settings”. If the current instance of Keycloak was a new installation and not an upgrade of the previous instance, then the aforementioned command will not be used and therefore the fix won’t apply.

Fix

You can manually migrate the configuration of the Keycloak app on all UCS system, after you updated the app on all UCS systems to the same version:

univention-keycloak upgrade-config