Wrong doc. link: https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/using_single_sign-on_with_jboss_eap/securing-the-jboss-eap-management-console-with-an-openid-provider_default#configuring-red-hat-single-sign-on-to-secure-jboss-eap-management-console_securing-the-jboss-eap-management-console-with-an-openid-provider

The documentation on securing the JBoss EAP management console with an OpenID provider incorrectly states that the Valid Redirect URIs should be set to http://localhost:9990. This URI is missing the required wildcard * at the end. For the redirection to work correctly with the management console's different paths, the URI should be configured as either http://localhost:9990/* or http://localhost:9990/console/*. The current example will cause a redirection error.

For comparison, Upstream's documentation (guide) has the correct setting: https://www.wildfly.org/guides/security-oidc-management-console/