Get "access_denied for broker login oidc" in logs

Cyril · June 23, 2023, 1:10pm

Hi,

My company is using Keycloak 10.0.2 on production environnement.
We have an “Identity Provider” that point to an Okta instance.
From time to time we get some errors in the logs : “access_denied for broker login oidc”.
I know that message is coming from :

github.com

keycloak/keycloak/blob/11.0.2/services/src/main/java/org/keycloak/broker/oidc/AbstractOAuth2IdentityProvider.java#L457


      
              this.callback = callback;
              this.realm = realm;
              this.event = event;
          }
          
          @GET
          public Response authResponse(@QueryParam(AbstractOAuth2IdentityProvider.OAUTH2_PARAMETER_STATE) String state,
                                       @QueryParam(AbstractOAuth2IdentityProvider.OAUTH2_PARAMETER_CODE) String authorizationCode,
                                       @QueryParam(OAuth2Constants.ERROR) String error) {
              if (error != null) {
                  logger.error(error + " for broker login " + getConfig().getProviderId());
                  if (error.equals(ACCESS_DENIED)) {
                      return callback.cancelled(state);
                  } else if (error.equals(OAuthErrorException.LOGIN_REQUIRED) || error.equals(OAuthErrorException.INTERACTION_REQUIRED)) {
                      return callback.error(state, error);
                  } else {
                      return callback.error(state, Messages.IDENTITY_PROVIDER_UNEXPECTED_ERROR);
                  }
              }
          
              try {

I don’t know what to do to understand better the reason, I don’t even know if it’s related to Okta IDP.
I’m kind of stuck.
If you have any advice to understand better or to get more logs linked to this context, I’ll appreciate.

Regards

Topic		Replies	Views
Cant log in with/connect identity provider: "invalid_client" Getting advice identity-brokering , oidc	0	331	November 10, 2023
Authentication via OIDC issue Getting advice oidc	6	975	January 28, 2024
Problem with custom identity provider oauth2 Configuring the server	1	651	March 19, 2021
Issues with Keycloak OIDC authorization Configuring the server	2	946	February 10, 2021
App in Okta Dashboard and app authentication in Keycloak Getting advice authentication , oidc	0	51	April 22, 2024

Get "access_denied for broker login oidc" in logs

Related Topics