using Administration login via SAML, custom keycloak serverconfig system
saml set status enable set default-profile "no-permission" set entity-id
"http://xxxxxx:8443/metadata/" set idp-entity-id
"https://yyyyy/realms/realm_a" set idp-single-sign-on-u...
I've found the cause of the problem.This new authentication daemon
http_authd introduced in 7.6.4 can't handle a large SAML Response
payload from IDP (the size of the SAML document)Our IDP was sending all
the VPN roles/groups along in the SAML Respon...