Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unable to use Keycloak Key Manager for "Try Out Block" in WSO2 APIM dev-portal #12980

Open
iam8139 opened this issue Sep 22, 2022 · 1 comment

Comments

@iam8139
Copy link

iam8139 commented Sep 22, 2022

I tried to use Keycloak Key Manager for the "Try out" Block in the WSO2 APIM dev portal. By default, Resident key Manager is selected for the try-out console ->
image

If I disable Resident Key Manager in the WSO2 admin console, It does not allow me to create any token ->
image

Is there any configuration available to use the Keycloak key manager for the try-out console ??

@ahmaddehghani
Copy link

ahmaddehghani commented Oct 10, 2023

Adding the fix (below) in the deployment.toml has resolved our issue.

[authentication.framework.extensions] 
provisioning_handler = "org.wso2.carbon.identity.application.authentication.framework.handler.provisioning.impl.SystemRolesRetainedProvisionHandler"

In our case, we remove all applications created prior to the issue.

for choice custom key manager follow below:

In the API Publisher, navigate to the API you've selected or created, and go to the "Edit" section of the API configuration.

publisher -> runtime section -> Application level security -> Configure the key manager -> Permission selected -> choice keycloak/custom key-manager (not selected Resident Key Manager)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants