Skip to main content

KeyCloak integration with OpenLM

KeyCloak configuration​

Prerequisites​

  • KeyCloak MUST run HTTPS
  • No spaces allowed in usernames

Configuration​

  1. To get the authentication configuration for KeyCloak:
    keyCloakURL/realms/realm-name/.well-known/openid-configurationkeyCloakURL - should be replaced by the url of keycloak
    master -should be changed to the real name if it is not the master.     for example http://localhost:8080/realms/master/.well-known/openid-configuration

  2. To define a client, login to the administration console, select Clients tab in left menu, then select Create Client button:Keycloak admin console Clients tab with the Create Client button.Keycloak Create Client form for defining a new client.

  3. Save the client.

  4. Select the client to see its details.

  5. Add OIDC external provider in Identity\portal , use the following ClientID and Client Secret
    Adding an OIDC external provider in Identity Service with the Keycloak Client ID.

    OIDC external provider form with the Keycloak Client Secret entered.

  6. Authority should be filled with the issuer value from the output of the command in step 2.
    Note - in some cases one needs to use keycloak-url/auth/realms/master/.well-known/openid-configuration
    OIDC external provider Authority field filled with the Keycloak issuer value.

  7. Save the external provider.

  8. Edit the KeyCloak client and add the redirect uri from the OIDC external provider config in Identity Service:
    Editing the Keycloak client to add the redirect URI from the Identity Service provider config.

  9. Save the client.

Last updated on by Maria Gilca