What is invalid destination keycloak error?

[husainr]

In logs i am getting error as error=invalid_saml_response, reason=invalid_destination what does it means?

[gsmith]

@husainr

error=invalid_saml_response, reason=invalid_destination

Invalid SAML Response (Invalid Destination)

Yes, it was because I have Keycloak in Kubernetes behind an Ingress service. I’m using Nginx Ingress. I needed to configure use_forward_headers to true. I also had to ensure that the incoming connection came into Nginx Ingress via HTTPS and port 443. This issue happens when Keycloak thinks that the URL it is being contacted on is different than the URL in the payload. You have to make sure that all the X-Forward-* headers are being sent correctly and that Keycloak is configured to use them. Oth…

[husainr]

1. how to configure keycloak to use the header properly?
2. where to add use_forward_headers flag?

[gsmith]

Hello,

I would start here other then that I’m not sure about your environment.