product · inferred from evidence
Keycloak 26.0.x
A specific version range of the Keycloak identity and access management product.
- SAML IDP-initiated SSO fails with cookie_not_found behind NGINX (Keycloak 26)
Add proxy_cookie_flags ~.* secure samesite=None; to the NGINX config (as an ingress annotation if you use ingress-nginx), which marks the Keycloak cookies Secure and SameSite=None so they survive the cross-site IDP POST. Multiple reporters