Help with KeyCloak SAML

Product Support
1

Your software
My Mautic version is: 3.1.0
My PHP version is: 7.3

Your problem
My problem is: Can’t properly connect KeyCloak SAML IDP.
Maybe someone can share IDP metadata file template (and KeyCloak client configuration).
I’ve getting in my KeyCloak instance this, but it is obv incorrect because isn’t have any auth realms.
My KeyCloak based on the auth.myhost.com

<md:EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="http://mautic.myhost.com/">
    <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" AuthnRequestsSigned="false" WantAssertionsSigned="false">
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://mautic.myhost.com/" />
        <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</md:NameIDFormat>
        <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://mautic.myhost.com/s/saml/login_check" isDefault="true" index="1" />
    </md:SPSSODescriptor>
</md:EntityDescriptor>

Internal Server Error 2020-08-25 21-11-17
Internal Server Error 2020-08-25 21-11-172240×1099 208 KB

Thanks.

2

Seems I have some progress, I found working template and Mautic trying to authenticate user via KeyCloak, but at end I again have an error that not explained in the logs absolutely.
I enabled debug mode via config/local.php but directory app/logs empty.

image
image455×566 20.3 KB

Mautic SAML configuration looks odd and abadoned, seems you need to have a lot of luck in order to set it up. No properly docs, no support at least one SAML provider by default, no logs.

3

hey, I’m new to Mautic and I’ve been tasked with integrating it with Keycloak OAuth2 Open Id Connect . Could you please provide guidance or suggest a method to accomplish this? Any help would be greatly appreciated.