Skip to content

Commit 2fd31ae

Browse files
committed
Add troubleshooting note for group visibility issue in Assign Global Role
1 parent ca818e7 commit 2fd31ae

File tree

5 files changed

+19998
-1702
lines changed

5 files changed

+19998
-1702
lines changed

docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-oidc.md

+13
Original file line numberDiff line numberDiff line change
@@ -156,3 +156,16 @@ When you fill the **Configure a Keycloak OIDC account** form and click on **Enab
156156
### Keycloak Error: "Invalid grant_type"
157157

158158
* In some cases, this error message may be misleading and is actually caused by setting the `Valid Redirect URI` incorrectly.
159+
160+
### Unable to See Groups When Assigning Global Roles
161+
162+
When setting up an Keycloak OIDC, if the user isn't part of any groups, `groupSearchEnabled` is disabled, preventing group search in Assign Global Roles.
163+
This can't be updated through the UI. You can do one of the following workaround.
164+
165+
- **Workaround 1:** Edit the `authconfig/keycloakoidc` on Rancher local:
166+
```bash
167+
kubectl edit authconfigs.management.cattle.io keycloakoidc
168+
```
169+
Set `groupSearchEnabled: true`.
170+
171+
- **Workaround 2:** Reconfigure the Keycloak OIDC setup using a user that is assigned to at least one group in Keycloak.

0 commit comments

Comments
 (0)