clayrisser / keycloak-sso-configs Goto Github PK

We have encoutered a problem when follow your instructions.

Rancher can redirect to keyloack login page. After login keyloack successfully, we got a 403 error when return back to Rancher. We found below error in Rancher's log.

2020/06/18 07:09:41 [DEBUG] RESPONSE: ===
<samlp:Response
...
</samlp:Response>
===
NOW: 2020-06-18 07:09:41.168806951 +0000 UTC
ERROR: cannot validate signature on Response: Could not verify certificate against trusted certs.

Any idea? Thank you.

Hi,
I have follow your document to setting keycloak and gitlab
but when i try to login ,here show 500 error
official document said (https://docs.gitlab.com/ee/integration/saml.html#help-and-feedback)

If you see a “500 error” in GitLab when you are redirected back from the SAML sign in page, this likely indicates that GitLab could not get the email address for the SAML user.
Make sure the IdP provides a claim containing the user’s email address, using claim name email or mail.

so i have decode and check my saml response,it's obvious inclue my email address
am i miss something?