Unable to redirect to app servers from webservers after Keycloak Integration?

[Charvick]

Hi,

I've been trying to integrate Keycloak with Qliksense. I have a query regarding this:

Can we remove webservers after Keycloak Integration?

• This is my current setup: I have an Qliksense application server and a webserver. When any request from an external user comes in, it goes to the webserver and then redirects to the Qlik app server.
• After keycloak integration, the redirection is happening from webserver to app server and based on the "OpenID Connect Metadata URI" the request then gets redirected to keycloak for authentication
• The redirection is as follows: Website for external clients -> Webserver -> App server (where the keycloak virtual proxy has been configured) -> Webserver -> Keycloak (for authentication).
• Then after Keycloak the request should go back to the webserver and then to the Qlik app server
• But in our case that is not happening, the request is not coming back to the webserver and hence we are getting a 404 error

So, how can we make sure the request from keycloak is going back to webserver?

[Charvick]

If anyone knows the answer could you let me know?

[Jorge_FR]

Hello @Charvick .

I have the same Issue. We can work together in order to resolve it?

[Charvick]

Hi @Jorge_FR ,

I could not find an actual solution. The issue here was, keycloak was sending a different type of response everytime with no fixed format, hence the request was getting stopped at webserver every time as the webserver did not know where to redirect the response to. So instead of webserver, we used Kong to redirect any request that comes in from <keycloak-Qlik clientid> to <Qlik server/keycloak virtual proxy> and then we completely removed the webserver.