Keycloak-link not working in Jans Version 1.8.0 and encode.py not accepting "&" in pwd string

[zackbum]

Hi,

I have installed Jans server version 1.8.0 with Postgres db, Jans-kc-link and Jans-Saml options. I could successfully import users from Active Directory into Keycloak. Keycloak and Jans servers are on the same server. In keycloak, I have set up a new service client to import keycloak users into Jans server. When I use kcadm.sh I could login to keycloak using user/password or client-id and client secret with no problem. When I use the same credentials in jans-kc-link, I get the following error:

2025_06_29.jetty.log:29-06-2025 10:21:11.329 ERROR keycloak.link.timer.JansKeycloakLinkTimer JansKeycloakLinkTimer.java:214- not able to connect keycloack server : jakarta.ws.rs.ProcessingException: com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "features" (class org.keycloak.representations.info.ServerInfoRepresentation), not marked as ignorable (15 known properties: "protocolMapperTypes", "providers", "identityProviders", "themes", "passwordPolicies", "clientInstallations", "memoryInfo", "enums", "socialProviders", "clientImporters", "profileInfo", "componentTypes", "systemInfo", "cryptoInfo", "builtinProtocolMappers"])

In addition, when I use encode.py to encode personal password the character "&" is not accepted. The password string was encoded and stopped encoding until "&" appears in string. I am wondering why in Jans-kc-link tui encoding of passwords or secrets is not done automatically when saving as it was done in former versions of Jans server using Jans-link with depreciated ldap options?

Any comments to get users from Active Directory into Jans server version 1.8.0?

Thanks

[zackbum]

Hi @ossdhaval @jgomer2001 @uprightech @nynymike @manojs1978,

no comments here?

[uprightech]

Hello @zackbum , unfortunately , development on jans-kc-link was recently discontinued.
Sincere apologies for any inconveniences.

[zackbum]

Hello @uprightech, @nynymike

Thanks for clarification. So what is your recommendation to get e.g. thousand users into Jans server? Is it intendend to do this task manually? My understanding was, that the Keycloak integration was intended to use Jans server for user authentication and to use the Saml features of Keycloak. Thus, I do not really understand this development decision. Does kc-link work in paid GLUU FLEX or GLUU server or is development of kc-link also discontinued here? I am just looking for alternatives :)

[ossdhaval]

@zackbum

@uprightech's comment means that core team is focusing efforts on other priorities.

At the same time, the jans-kc-link is very much available as part of Janssen server.

Future development of jans-kc-link will be driven by the community. Community can contribute towards fixes, enhancements and testing in the same way as for the other components.

Note: Docs for jans-kc-link are missing in the 1.1.8 but available in nightly build docs. They'll part of next stable release again.

[nynymike]

& might need to be escaped. Put the password in single quotes when used as input in bash

[zackbum]

Hi @nynymike,

Thanks for the tip. password in single quotes work with encode.py 👍