Search code examples
keycloakkeycloak-services

Is it possible to use RSA-512 instead of RSA-256 at Keycloak?

I guess Keycloak has predefined algorithms/Active Keys such like RSA256,AES and HS256?

Is it possible to use RSA512 instead of RSA256?

Thank you for your kind helps

Solution

  • In addition to the rsa-generated provider settings, you may need to go to "Client details" -> "Advanced" -> "Fine grain OpenID Connect configuration" and specify RS512 in "Access token signature algorithm" and "ID token signature algorithm". Otherwise, Keycloak creates fallback-RS256 provider and keeps using RS256 protocol