How to avoid Grafana login Page while integrating with Keycloak for SSO

ahsanzubair · February 3, 2022, 5:19pm

I am making a Single Sign-On using Keycloak where multiple Grafana projects will be linked together using Single Sign-On such that if the user logs in to the user dashboard he will be shown different Grafana projects and when he clicks on them he will be redirected to his respective Grafana project dashboard without going to Grafana login page and clicking on Sign in with OAuth button. Is there a possibility to do so?

Here is my grafana defaults.ini configurations:

And here is Keycloak client configuration:

jangaraj · February 3, 2022, 5:24pm

Your

oauth_auto_login = true

is in the wrong section. It must be in the [auth] section:

github.com

grafana/grafana/blob/4e37a53a1c0e39f6aacb1336bac3dfa7a84fc90c/conf/defaults.ini#L395

      
        
            disable_login_form = false
            
            
# Set to true to disable the sign out link in the side menu. Useful if you use auth.proxy or auth.jwt.
            disable_signout_menu = false
            
            
# URL to redirect the user to after sign out
            signout_redirect_url =
            
            
# Set to true to attempt login with OAuth automatically, skipping the login screen.
            # This setting is ignored if multiple OAuth providers are configured.
            oauth_auto_login = false
            
            
# OAuth state max age cookie duration in seconds. Defaults to 600 seconds.
            oauth_state_cookie_max_age = 600
            
            
# limit of api_key seconds to live before expiration
            api_key_max_seconds_to_live = -1
            
            
# Set to true to enable SigV4 authentication option for HTTP-based datasources
            sigv4_auth_enabled = false