Keycloak via MSAL (and .NET 5.0)

[Travis Loyd]

I've setup keycloak in my kubernetes server & configured it with user federation with onprem active directory server.

Am now working to configure MSAL to work with keycloak.

When it calls into keycloak I get a 'We are sorry..., Page not found".  The generated url is:

https://keycloak.k-dev.harmony.net/auth/oauth2/v2.0/authorize?scope=openid+profile+offline_access&response_type=code&client_id=app_lido&redirect_uri=http%3A%2F%2Flocalhost%3A65052&client-request-id=a59a6b4d-63e2-46bf-bda6-9d72e480bcf4&x-client-SKU=MSAL.NetCore&x-client-Ver=4.33.0.0&x-client-CPU=x64&x-client-OS=Microsoft+Windows+10.0.19043&prompt=select_account&code_challenge=xZy4jAXv4tK8PML0warJuh6GLL00-jKvROtzntzi8z8&code_challenge_method=S256&state=02b97ec7-ceb3-46d9-a412-cca0b8d21b0f56f22de3-c383-46fa-aa73-866bd0355172&client_info=1

What's wrong with that URL?

I'm hoping someone in this channel can see what's wrong with it, seems like the realm should be in there maybe, and that will help me to adjust my MSAL implementation to get it to work with keycloak.  What would be even better though is if someone can provide an MSAL example.  If providing a link please make sure it is .NET 5+, (I've found many older links which are no longer relevant).

MSAL is modern, and is supposed to support many standards, such as openid.  This shouldn't be too hard I wouldn't think.