Netbox / SSO Keycloak login ends up in Netbox admin user

[d7volker]

Hello all,

we have a Netbox Installation, which is empty. We configured SSO using the provider social_core.backends.keycloak.KeycloakOAuth2.

SSO is working, but each login ends up in the superuser account (named "manager") of netbox.
I don't understand it anymore. Also the account is not synched on first login.

Here is our config:

env/netbox.env

# SSO
REMOTE_AUTH_ENABLED=True
REMOTE_AUTH_BACKEND='social_core.backends.keycloak.KeycloakOAuth2'
REMOTE_AUTH_AUTO_CREATE_USER=True
REMOTE_AUTH_GROUP_SYNC_ENABLED=True

configuration/configuration.py

# SSO
SOCIAL_AUTH_KEYCLOAK_ID_KEY = 'email'
SOCIAL_AUTH_KEYCLOAK_KEY = ''
SOCIAL_AUTH_KEYCLOAK_SECRET = ''
SOCIAL_AUTH_KEYCLOAK_PUBLIC_KEY = ''
SOCIAL_AUTH_KEYCLOAK_AUTHORIZATION_URL = '....../realms/ourrealm/protocol/openid-connect/auth'
SOCIAL_AUTH_KEYCLOAK_ACCESS_TOKEN_URL = '....../realms/ourrealm/protocol/openid-connect/token'
SOCIAL_AUTH_BACKEND_ATTRS = {
    'keycloak': ("Our SSO", ""),
}
SOCIAL_AUTH_USERNAME_IS_FULL_EMAIL = True
SOCIAL_AUTH_PIPELINE = (
  'social_core.pipeline.social_auth.social_details',
  'social_core.pipeline.social_auth.social_uid',
  'social_core.pipeline.social_auth.auth_allowed',
  'social_core.pipeline.social_auth.social_user',
  'social_core.pipeline.user.get_username',
  'social_core.pipeline.user.create_user',
  'social_core.pipeline.social_auth.associate_user',
  'social_core.pipeline.social_auth.load_extra_data',
  'social_core.pipeline.user.user_details',
)

I am thankful for any hint.