Client Authentication is enabled.
That's the evaluation from keycloak for my agent
{
"exp": 1712908858,
"iat": 1712908558,
"jti": "00139043-bca5-4109-accb-f281ba0be0c2",
"iss": "https://keycloak:8069/realms/otc",
"aud": "account",
"sub": "6168fc98-0c41-4be8-bea3-eaa207a2bc65",
"typ": "Bearer",
"azp": "otc-2024-support-portal",
"session_state": "1bcfc24b-2c8f-46fb-8036-24229fdac166",
"acr": "1",
"allowed-origins": [
"http://10.224.129.113/osTicket/*"
],
"realm_access": {
"roles": [
"offline_access",
"default-roles-otc",
"uma_authorization"
]
},
"resource_access": {
"account": {
"roles": [
"manage-account",
"manage-account-links",
"view-profile"
]
}
},
"scope": "openid email profile",
"sid": "1bcfc24b-2c8f-46fb-8036-24229fdac166",
"email_verified": true,
"name": "John Doe",
"preferred_username": "an1",
"given_name": "John",
"family_name": "Doe",
"email": "jdoe@otc.com"
}
The agent does already exist, its active and the email address in both systems are matching
I adjusted the settings
And I changed the Apache server from PREFORK to FAST_CGI.
Still got the same problem, maybe I'm overlooking something?!?