@mabartos the problem might be that the https://www.oasis-open.org/standard/saml/ blocks automated requests with 403, while accessing it via browser works.

FYI I've added the link into ignored-links in https://github.com/keycloak/keycloak/pull/48702/changes#diff-0d702c6f58d0c32eb70d624afbc8f48dffb92b7407f16153b056f0d3cee169d6R43

@vramik Yes, that's what I thought, and described it in the issue. Thanks for the info.

I'll check if it needs to be backported, and if yes, it seems that it should not be part of your PR. I'll let you know.

@vramik It was added as part of this:

• Step-up authentication for SAML clients #10155

Which is part of the 26.6.0

So, I'd suggest to have it separated and proceed with this PR and backport it to 26.6.0.

Does it work to you?

@mabartos it works, I'll rebase my PR once this one lands, thanks

Ok, fixed already right now 😄

#48682

Thanks @mabartos, this is already managed by #48681. Thanks!