js/apps/admin-ui/test/utils/table.ts:112

• locator.count() does not auto-wait, unlike the previous click(). If the toolbar is still rendering, every count can be zero and this helper immediately throws; wait for an actionable candidate (for example with an auto-waiting combined locator) before deciding to use the overflow fallback.

  const exactButton = toolbar.getByRole("button", {
    name: itemName,
    exact: true,
  });
  if ((await exactButton.count()) > 0) {

js/apps/admin-ui/test/utils/constants.ts:6

• The environment override is not consistently applied: test/identity-providers/main.ts:4-8,99-100 still hard-codes http://localhost:8080. With KEYCLOAK_SERVER_URL set, login/admin calls target one server while those provider flows target another, so all server URL consumers need to use this constant.

export const SERVER_URL = normalizeServerUrl(
  process.env.KEYCLOAK_SERVER_URL ?? DEFAULT_SERVER_URL,
);

js/apps/admin-ui/test/clients/saml.ts:54

• Catching every error also hides missing controls, timeouts, and browser/page failures; the test can then save an unchanged form and pass on the success alert. Only skip the interaction when the control is explicitly disabled/read-only and let unexpected failures propagate.

  try {
    await switchOff(page, "#attributes\\.saml🍺force🍺post🍺binding");
  } catch {
    // Some generated SAML clients expose this setting as read-only.
  }

js/apps/admin-ui/test/autentication/flows.spec.ts:207

• The test now becomes skipped whenever all drag strategies fail, including when the product's reorder behavior has regressed. Keep the retrying helper, but fail when it returns false and retain the success-notification assertion so this behavior remains covered.

    test.skip(
      !moved,
      "Drag-and-drop reorder could not be triggered deterministically in this runtime.",
    );

js/apps/admin-ui/test/clients/assign-oid4vci-client-scope.ts:10

• This OID4VCI path is still unconditional, so the assignment test fails while looking for this option whenever the server feature is disabled. Apply the same OID4VC_VCI gate added to oid4vci-client-scope.spec.ts before selecting the protocol so unsupported environments skip consistently.

  await selectItem(page, "#kc-protocol", "OpenID for Verifiable Credentials");

js/apps/admin-ui/test/utils/table.ts:71

• The final fallback leaves the table and can click an unrelated global link (for example, a matching sidebar item) while rows are still loading, because the preceding count() calls do not wait. Keep this fallback row-scoped and wait for the row instead.

  const exactLink = page.getByRole("link", { name: itemName, exact: true });
  if ((await exactLink.count()) > 0) {
    await exactLink.first().click();
    return;
  }

  await page.getByRole("link", { name: itemName }).first().click();

js/apps/admin-ui/test/utils/form.ts:129

• check()/uncheck() can throw after dispatching the change when the switch rerenders. Unconditionally clicking in the catch path can then toggle an already-correct switch back, so re-read its state before applying the fallback.

      await clickSwitch(switchElement);