How to disable the welcome page in Keycloak 17 #10467
Replies: 6 comments 6 replies
-
|
Could you mention how you disable it in standalone.xml? Is it with a Undertow filter perhaps? |
Beta Was this translation helpful? Give feedback.
-
|
On Quarkus we'd probably want this to be exposed as a feature, something like |
Beta Was this translation helpful? Give feedback.
-
|
Hi, do we need actually to "hide" or add an additional protection layer using reverse proxy to the admin login page? Or is it secure enough just to have it "public", at least, to those who have access to the internal network. |
Beta Was this translation helpful? Give feedback.
-
|
I was also surprised that there is no straightforward way to disable that page, certainly they shouldn't be public in a production deployment. On Keycloak 17.0 I've tried theming that page with a As a last resort, I've configured on the reverse proxy an authentication layer for the welcome page and the admin login. I'd love to learn a less hacky way to fix this, if there's one. |
Beta Was this translation helpful? Give feedback.
-
|
Hi, are there any news regarding this? |
Beta Was this translation helpful? Give feedback.
-
|
Personnally I customized the theme of the welcome page to automatically redirect to the admin authentication page (like if you clicked on the link to launch the admin console)… Not ideal, but at least the welcome page is not browsable. theme/welcome/theme.properties import=common/keycloak
locales=entheme/welcome/index.ftl <!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="refresh" content="0; url=${adminUrl}" />
<meta name="robots" content="noindex, nofollow" />
<script type="text/javascript">
window.location.href = '${adminUrl}'
</script>
</head>
<body>
If you are not redirected automatically, follow this <a href="${adminUrl}">link</a>.
</body>
</html>Then, I defined the I did it the same way for Keycloak 16, the only difference is the variable name that changed. It was previously named |
Beta Was this translation helpful? Give feedback.
-
|
Hello, any updates for this issue? I can't deal with locales on welcome pages... Any help? |
Beta Was this translation helpful? Give feedback.
-
|
@us4r93t3mnus In Keycloak 24, the Welcome page is only used to create the initial admin user. After that, any time you try to go to the Welcome page it will redirect to the admin console and force a login. Does that help? |
Beta Was this translation helpful? Give feedback.
-
|
That's true. I was facing the welcome page as an index webpage and I was wrong. Thanks for the info. |
Beta Was this translation helpful? Give feedback.
-
|
Hi! That's a good start. An ideal solution would be to be able to define a redirect url for the users to be redirected to I think, like nicolas-goudry did. As an exemple we want to redirect our users on our main app when they are hitting the welcome page of keycloak, to trigger the auth flow if they are disconnected. If Keycloak would redirect to the admin login they would face a bad gateway as we are blocking the admin endpoint to internet |
Beta Was this translation helpful? Give feedback.
-
|
I am also looking into this. Did anyone succeed in overriding the welcome page with a redirect to the login-flow for another realm in 24.0.2, not the master/admin console? There's a |
Beta Was this translation helpful? Give feedback.
-
|
Yes, looks like it works. Added the steps here |
Beta Was this translation helpful? Give feedback.
-
The new distribution of Keycloak that is powered by Quarkus does not have a standalone.xml file in order to achieve this purpose.
How can I disable the path and (if needed) how can I customize this page?
Beta Was this translation helpful? Give feedback.
All reactions