# Elastic OpenID Keyclock failed cannot find realm

**URL:** <https://discuss.elastic.co/t/elastic-openid-keyclock-failed-cannot-find-realm/354403>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [February 29, 2024, 5:42am UTC](https://discuss.elastic.co/t/elastic-openid-keyclock-failed-cannot-find-realm/354403 "2024-02-29T05:42:20Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Dave\_Hafid](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dave_hafid/32/48115_2.png) [@Dave\_Hafid](https://discuss.elastic.co/u/Dave_Hafid)\
**Post date:** [February 29, 2024, 5:42am UTC](https://discuss.elastic.co/t/elastic-openid-keyclock-failed-cannot-find-realm/354403/1 "2024-02-29T05:42:20Z")

</div>

hi guys i need help, we try to configure sso using keycloak , using OpenID connect we facing issue and i dont know how to fix this

 ![openid](https://us1.discourse-cdn.com/elastic/original/3X/2/7/271654ab6f6df984ad9777e77c2fe9749a047dfe.png)

and this error

```auto
[2024-02-29T12:37:27,257][WARN][r.suppressed] [elastic01] path: /_security/oidc/prepare, params: {}, status: 500
org.elasticsearch.ElasticsearchSecurityException: Cannot find OpenID Connect realm with name [kpi]
        at org.elasticsearch.xpack.security.action.oidc.TransportOpenIdConnectPrepareAuthenticationAction.doExecute(TransportOpenIdConnectPrepareAuthenticationAction.java:89) ~[?:?]
        at org.elasticsearch.xpack.security.action.oidc.TransportOpenIdConnectPrepareAuthenticationAction.doExecute(TransportOpenIdConnectPrepareAuthenticationAction.java:28) ~[?:?]
        at org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:87) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.action.support.ActionFilter$Simple.apply(ActionFilter.java:53) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:85) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInternal$3(SecurityActionFilter.java:163) ~[?:?]
        at org.elasticsearch.action.ActionListenerImplementations$DelegatingFailureActionListener.onResponse(ActionListenerImplementations.java:212) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$8(AuthorizationService.java:455) ~[?:?]
        at org.elasticsearch.xpack.security.authz.AuthorizationService$AuthorizationResultListener.onResponse(AuthorizationService.java:1028) ~[?:?]
        at org.elasticsearch.xpack.security.authz.AuthorizationService$AuthorizationResultListener.onResponse(AuthorizationService.java:994) ~[?:?]
        at org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(ContextPreservingActionListener.java:32) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$9(AuthorizationService.java:469) ~[?:?]
        at org.elasticsearch.action.ActionListenerImplementations$ResponseWrappingActionListener.onResponse(ActionListenerImplementations.java:236) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.xpack.security.authz.RBACEngine.authorizeClusterAction(RBACEngine.java:186) ~[?:?]
        at org.elasticsearch.xpack.security.authz.AuthorizationService.authorizeAction(AuthorizationService.java:459) ~[?:?]
        at org.elasticsearch.xpack.security.authz.AuthorizationService.maybeAuthorizeRunAs(AuthorizationService.java:435) ~[?:?]
        at org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorize$3(AuthorizationService.java:322) ~[?:?]
        at org.elasticsearch.action.ActionListener$2.onResponse(ActionListener.java:178) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(ContextPreservingActionListener.java:32) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.xpack.security.authz.RBACEngine.lambda$resolveAuthorizationInfo$0(RBACEngine.java:151) ~[?:?]
        at org.elasticsearch.action.ActionListenerImplementations$ResponseWrappingActionListener.onResponse(ActionListenerImplementations.java:236) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.lambda$getRoles$4(CompositeRolesStore.java:194) ~[?:?]
        at org.elasticsearch.action.ActionListenerImplementations$ResponseWrappingActionListener.onResponse(ActionListenerImplementations.java:236) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.lambda$getRole$5(CompositeRolesStore.java:212) ~[?:?]
        at org.elasticsearch.action.ActionListenerImplementations$ResponseWrappingActionListener.onResponse(ActionListenerImplementations.java:236) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.xpack.core.security.authz.store.RoleReferenceIntersection.lambda$buildRole$0(RoleReferenceIntersection.java:49) ~[?:?]
        at org.elasticsearch.action.ActionListenerImplementations$ResponseWrappingActionListener.onResponse(ActionListenerImplementations.java:236) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.action.support.GroupedActionListener.onResponse(GroupedActionListener.java:56) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.buildRoleFromRoleReference(CompositeRolesStore.java:292) ~[?:?]
        at org.elasticsearch.xpack.core.security.authz.store.RoleReferenceIntersection.lambda$buildRole$1(RoleReferenceIntersection.java:53) ~[?:?]
        at java.lang.Iterable.forEach(Iterable.java:75) ~[?:?]
        at org.elasticsearch.xpack.core.security.authz.store.RoleReferenceIntersection.buildRole(RoleReferenceIntersection.java:53) ~[?:?]
        at org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.getRole(CompositeRolesStore.java:210) ~[?:?]
        at org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.getRoles(CompositeRolesStore.java:187) ~[?:?]
        at org.elasticsearch.xpack.security.authz.RBACEngine.resolveAuthorizationInfo(RBACEngine.java:147) ~[?:?]
        at org.elasticsearch.xpack.security.authz.AuthorizationService.authorize(AuthorizationService.java:338) ~[?:?]
        at org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInternal$4(SecurityActionFilter.java:159) ~[?:?]
        at org.elasticsearch.action.ActionListenerImplementations$ResponseWrappingActionListener.onResponse(ActionListenerImplementations.java:236) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.action.ActionListenerImplementations$MappedActionListener.onResponse(ActionListenerImplementations.java:95) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.xpack.security.authc.AuthenticatorChain.authenticate(AuthenticatorChain.java:93) ~[?:?]
        at org.elasticsearch.xpack.security.authc.AuthenticationService.authenticate(AuthenticationService.java:262) ~[?:?]
        at org.elasticsearch.xpack.security.authc.AuthenticationService.authenticate(AuthenticationService.java:171) ~[?:?]
        at org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.applyInternal(SecurityActionFilter.java:155) ~[?:?]
        at org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.apply(SecurityActionFilter.java:114) ~[?:?]
        at org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:85) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:62) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.tasks.TaskManager.registerAndExecute(TaskManager.java:196) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.client.internal.node.NodeClient.executeLocally(NodeClient.java:108) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.client.internal.node.NodeClient.doExecute(NodeClient.java:86) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.client.internal.support.AbstractClient.execute(AbstractClient.java:381) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.xpack.security.rest.action.oidc.RestOpenIdConnectPrepareAuthenticationAction.lambda$innerPrepareRequest$0(RestOpenIdConnectPrepareAuthenticationAction.java:64) ~[?:?]
        at org.elasticsearch.rest.BaseRestHandler.handleRequest(BaseRestHandler.java:103) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.xpack.security.rest.SecurityRestFilter.doHandleRequest(SecurityRestFilter.java:94) ~[?:?]
        at org.elasticsearch.xpack.security.rest.SecurityRestFilter.lambda$handleRequest$0(SecurityRestFilter.java:85) ~[?:?]
        at org.elasticsearch.action.ActionListener$2.onResponse(ActionListener.java:178) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.xpack.security.authc.support.SecondaryAuthenticator.lambda$authenticateAndAttachToContext$3(SecondaryAuthenticator.java:99) ~[?:?]
        at org.elasticsearch.action.ActionListenerImplementations$ResponseWrappingActionListener.onResponse(ActionListenerImplementations.java:236) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.xpack.security.authc.support.SecondaryAuthenticator.authenticate(SecondaryAuthenticator.java:109) ~[?:?]
        at org.elasticsearch.xpack.security.authc.support.SecondaryAuthenticator.authenticateAndAttachToContext(SecondaryAuthenticator.java:90) ~[?:?]
        at org.elasticsearch.xpack.security.rest.SecurityRestFilter.handleRequest(SecurityRestFilter.java:79) ~[?:?]
        at org.elasticsearch.rest.RestController.dispatchRequest(RestController.java:441) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.rest.RestController.tryAllHandlers(RestController.java:570) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.rest.RestController.dispatchRequest(RestController.java:325) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.http.AbstractHttpServerTransport.dispatchRequest(AbstractHttpServerTransport.java:458) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.http.AbstractHttpServerTransport.handleIncomingRequest(AbstractHttpServerTransport.java:554) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.http.AbstractHttpServerTransport.incomingRequest(AbstractHttpServerTransport.java:431) ~[elasticsearch-8.12.1.jar:?]
        at org.elasticsearch.http.netty4.Netty4HttpPipeliningHandler.handlePipelinedRequest(Netty4HttpPipeliningHandler.java:128) ~[?:?]
        at org.elasticsearch.http.netty4.Netty4HttpPipeliningHandler.channelRead(Netty4HttpPipeliningHandler.java:118) ~[?:?]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:442) ~[?:?]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) ~[?:?]
        at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) ~[?:?]
        at io.netty.handler.codec.MessageToMessageDecoder.channelRead(MessageToMessageDecoder.java:103) ~[?:?]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) ~[?:?]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) ~[?:?]
        at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) ~[?:?]
        at io.netty.handler.codec.MessageToMessageDecoder.channelRead(MessageToMessageDecoder.java:103) ~[?:?]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) ~[?:?]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) ~[?:?]
        at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) ~[?:?]
        at org.elasticsearch.http.netty4.Netty4HttpHeaderValidator.forwardData(Netty4HttpHeaderValidator.java:194) ~[?:?]
        at org.elasticsearch.http.netty4.Netty4HttpHeaderValidator.forwardFullRequest(Netty4HttpHeaderValidator.java:137) ~[?:?]
        at org.elasticsearch.http.netty4.Netty4HttpHeaderValidator.lambda$requestStart$1(Netty4HttpHeaderValidator.java:120) ~[?:?]
        at io.netty.util.concurrent.PromiseTask.runTask(PromiseTask.java:98) ~[?:?]
        at io.netty.util.concurrent.PromiseTask.run(PromiseTask.java:106) ~[?:?]
        at io.netty.util.concurrent.AbstractEventExecutor.runTask(AbstractEventExecutor.java:174) ~[?:?]
        at io.netty.util.concurrent.AbstractEventExecutor.safeExecute(AbstractEventExecutor.java:167) ~[?:?]
        at io.netty.util.concurrent.SingleThreadEventExecutor.runAllTasks(SingleThreadEventExecutor.java:470) ~[?:?]
        at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:566) ~[?:?]
        at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997) ~[?:?]
        at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) ~[?:?]
        at java.lang.Thread.run(Thread.java:1583) ~[?:?]

```

my configuration

```auto
xpack.security.authc.realms.oidc.oidc1:
  order: 2
  rp.client_id: "kibana"
  rp.response_type: code
  rp.redirect_uri: "https://kibana01.korelasi.local:5601/api/security/oidc/callback"
  op.issuer: "https://10.199.199.45:8443/realms/kpi"
  op.authorization_endpoint: "https://10.199.199.45:8443/realms/kpi/protocol/openid-connect/auth"
  op.token_endpoint: "https://10.199.199.45:8443/realms/kpi/protocol/openid-connect/token"
  op.jwkset_path: "/etc/elasticsearch/certs/jwkset.json"
  op.userinfo_endpoint: "https://10.199.199.45:8443/realms/kpi/protocol/openid-connect/userinfo"
  op.endsession_endpoint: "https://10.199.199.45:8443/realms/kpi/protocol/openid-connect/logout"
  rp.post_logout_redirect_uri: "https://kibana01.korelasi.local:5601/security/logged_out"
  claims.principal: name
  ssl.verification_mode: none

```

kibana

```auto
xpack.security.authc.providers:
   oidc.oidc1:
     order: 0
     realm: kpi
   basic.basic1:
     order: 1

```

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [February 29, 2024, 7:31am UTC](https://discuss.elastic.co/t/elastic-openid-keyclock-failed-cannot-find-realm/354403/2 "2024-02-29T07:31:39Z")

</div>

Hi @Dave_Hafid

Assuming you're following the docs and the examples on

> **[Configuring single sign-on to the Elastic Stack using OpenID Connect |...](https://www.elastic.co/guide/en/elasticsearch/reference/8.12/oidc-guide.html)**

> **[Authentication in Kibana | Kibana Guide \[8.12\] | Elastic](https://www.elastic.co/guide/en/kibana/current/kibana-authentication.html#oidc)**

And your definition in elastic.yml

Seems like your realm is `oidc1`

> [@Dave\_Hafid](#):
>
> ` realm: kpi`

Not sure where `kpi` came from

Seems like it should be

` realm: oidc1`

Perhaps I'm missing something

---

<div class="post-metadata">

**Author:** ![Dave\_Hafid](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dave_hafid/32/48115_2.png) [@Dave\_Hafid](https://discuss.elastic.co/u/Dave_Hafid)\
**Post date:** [February 29, 2024, 7:51am UTC](https://discuss.elastic.co/t/elastic-openid-keyclock-failed-cannot-find-realm/354403/3 "2024-02-29T07:51:41Z")

</div>

hi step thanks for you support its working now but still facing some issue  
 ![error2](https://us1.discourse-cdn.com/elastic/original/3X/1/3/13fe7a9fb5fb53f3b9d2118e6299ee4ea46de8fd.png)

and this log error

```auto
[2024-02-29T14:48:02,106][WARN][o.e.x.s.a.RealmsAuthenticator] [elastic01] Authentication to realm oidc1 failed - Failed to authenticate user with OpenID Connect (Caused by org.elasticsearch.ElasticsearchSecurityException: Failed to parse or validate the ID Token)

```

and this is my realm setting

 ![1](https://us1.discourse-cdn.com/elastic/original/3X/4/d/4d35158fcd96e22c5aa68afd589123d6bdb29722.png)

and this one

 ![2](https://us1.discourse-cdn.com/elastic/original/3X/c/e/cef7d5fbd24782416d8d74c427e3f4b19d5ae9f2.png)

i need help

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [February 29, 2024, 9:03am UTC](https://discuss.elastic.co/t/elastic-openid-keyclock-failed-cannot-find-realm/354403/4 "2024-02-29T09:03:46Z")

</div>

Unfortunately, I / we are not experts on Keycloak portion

did you try setting the realm name in keycloak to `oidc1` as it is defined in elasticsearch.yml perhaps they need to be consistent

You can up the logging with

```auto
 PUT /_cluster/settings
 {
   "transient": {
     "logger.org.elasticsearch.xpack.security.authc.oidc": "trace"
   }
 }

```

There is also some advice here

> [@Unable to configure oidc](https://discuss.elastic.co/t/unable-to-configure-oidc/234821):
>
> we are trying to setup elasticsearch to use oidc for authentication here is my yaml file xpack.security.authc.token.enabled: true xpack.security.authc.realms.oidc.oidc1: order: 1 rp.client\_id: "6bd9f9a3-67a3-4392-b29c-675c16b818e9" rp.response\_type: "code" rp.redirect\_uri: "https://\<Kibana-Host\>/api/security/oidc/callback" op.issuer: "https://\<Login-Provider\>" op.authorization\_endpoint: "https://\<Login-Provider\>/oauth2/v2.0/authorize" op.t…

> [@Authentication failed for an OpenID integration](https://discuss.elastic.co/t/authentication-failed-for-an-openid-integration/220390):
>
> Hello, I am using OIDC with Elasticsearch and Kibana. My configuration is as follows: xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification\_mode: certificate xpack.security.transport.ssl.keystore.path: elastic-certificates.p12 xpack.security.transport.ssl.truststore.path: elastic-certificates.p12 xpack.security.http.ssl.enabled: true xpack.security.http.ssl.keystore.path: elastic-stack-ca.p12 xpack.security.http.ssl.truststore.path: …

Post some of the additional logs and perhaps we can help.

I also notice that you elasticsearch.yml definitions do not follow the same patterns as in our example...

```auto
xpack.security.authc.realms.oidc.oidc1:
  order: 2
  rp.client_id: "the_client_id"
  rp.response_type: code
  rp.redirect_uri: "https://kibana.example.org:5601/api/security/oidc/callback"
  op.issuer: "https://op.example.org"
  op.authorization_endpoint: "https://op.example.org/oauth2/v1/authorize"
  op.token_endpoint: "https://op.example.org/oauth2/v1/token"
  op.jwkset_path: oidc/jwkset.json
  op.userinfo_endpoint: "https://op.example.org/oauth2/v1/userinfo"
  op.endsession_endpoint: "https://op.example.org/oauth2/v1/logout"
  rp.post_logout_redirect_uri: "https://kibana.example.org:5601/security/logged_out"
  claims.principal: sub
  claims.groups: "http://example.info/claims/groups"`

```

I am not an expert on that portion but what you have does not seem to follow the patterns but perhaps you are more of the expert

Example from [here](https://www.elastic.co/guide/en/elasticsearch/reference/8.12/oidc-guide.html)

---

<div class="post-metadata">

**Author:** ![Dave\_Hafid](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dave_hafid/32/48115_2.png) [@Dave\_Hafid](https://discuss.elastic.co/u/Dave_Hafid)\
**Post date:** [February 29, 2024, 4:29pm UTC](https://discuss.elastic.co/t/elastic-openid-keyclock-failed-cannot-find-realm/354403/5 "2024-02-29T16:29:10Z")

</div>

its working now, i put full path of jwkset.  
thanks for your time and support

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [February 29, 2024, 4:56pm UTC](https://discuss.elastic.co/t/elastic-openid-keyclock-failed-cannot-find-realm/354403/6 "2024-02-29T16:56:01Z")

</div>

@Dave_Hafid  
Thanks for letting us know. It works. That helps other people...

Can you provide a copy of your working config that can be very helpful for other people.

Thanks so much!

---

<div class="post-metadata">

**Author:** ![Dave\_Hafid](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dave_hafid/32/48115_2.png) [@Dave\_Hafid](https://discuss.elastic.co/u/Dave_Hafid)\
**Post date:** [March 1, 2024, 3:09pm UTC](https://discuss.elastic.co/t/elastic-openid-keyclock-failed-cannot-find-realm/354403/7 "2024-03-01T15:09:00Z")

</div>

this my elastic configuration

```auto
xpack.security.authc.realms.oidc.oidc1:
   order: 2
   rp.client_id: "kibana"
   rp.response_type: code
   rp.redirect_uri: "https://kibana01.korelasi.local:5601/api/security/oidc/callback"
   op.issuer: "https://10.199.199.45:8443/realms/kpi"
   op.authorization_endpoint: "https://10.199.199.45:8443/realms/kpi/protocol/openid-connect/auth"
   op.token_endpoint: "https://10.199.199.45:8443/realms/kpi/protocol/openid-connect/token"
   op.jwkset_path: "https://10.199.199.45:8443/realms/kpi/protocol/openid-connect/certs"
   op.userinfo_endpoint: "https://10.199.199.45:8443/realms/kpi/protocol/openid-connect/userinfo"
   op.endsession_endpoint: "https://10.199.199.45:8443/realms/kpi/protocol/openid-connect/logout"
   rp.post_logout_redirect_uri: "https://kibana01.korelasi.local:5601/security/logged_out"
   claims.principal: name
   ssl.verification_mode: none

```

and my kibana configuration

```auto
xpack.security.authc.providers:
   oidc.oidc1:
     order: 0
     realm: oidc1
   basic.basic1:
     order: 1

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 29, 2024, 3:09pm UTC](https://discuss.elastic.co/t/elastic-openid-keyclock-failed-cannot-find-realm/354403/8 "2024-03-29T15:09:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.