You'll need to remove `/auth/` from your app SSO URLs, e.g.

    https://foo.example.com/auth/realms/foo/protocol/openid-connect/auth

Would become:

    https://foo.example.com/realms/foo/protocol/openid-connect/auth

-- decentral1se @ Autonomic