There are scenarios where clients would make Keycloak/RH-SSO calls with the default port in the URI. This will cause the SSO to deny such connections. The SSO configuration could add one more URL as a valid redirecting URL e.g:

http://myapp.project.openshiftdoimain/*
http://myapp.project.openshiftdoimain:80/*