If this message stays on screen for more than a few seconds, the SPA
could not complete sign-in against
.
Check
the realm's
discovery document. The usual causes are this origin missing from
the Keycloak client's redirect URIs, or a self-signed certificate that
the browser has not accepted yet.