Keycloak saml for grafana

Grafana Authentication
1

*running on linux
I am trying to set up keycloak saml for grafana

i have set up the config file to support SAML

  • After logging in with keycloak it fails to redirect to the log in page and get a “failed to determine the state of the SSO redirect”

  • currently im using the link https://rootURL/saml/acs
    ive also tried https://rootURL/* and still no success

i am also confused on what i should put as the master SAML Processing URL

2

Check debug logs first. To enable debug logging edit the configuration file grafana.ini:

[log]
# Either "console", "file", "syslog". Default is console and file
# Use space to separate multiple modes, e.g. "console file"
mode = console file

# Either "debug", "info", "warn", "error", "critical", default is "info"
level = debug

Then restart grafana for the setting to go into effect.

3

i now have it so it doesnt give me the redirect error. the issue im running into now is when i try and log in with saml it sends me back to the log in page with you indication of anything. but once i try to re log in with saml it doesnt require my log in anymore and goes right back to the log in page