KeyCloak integration with OpenLM

KeyCloak Configuration

Prerequisites

• KeyCloak MUST run HTTPS

Configuration

1. To get the authentication configuration for KeyCloak:
   keyCloakURL/realms/realm-name/.well-known/openid-configuration
   keyCloakURL – should be replaced by the url of keycloak
   master -should be changed to the real name if it is not the master.
   for example http://localhost:8080/realms/master/.well-known/openid-configuration
2. To define a client, login to the administration console, select Clients tab in left menu, then click Create Client button:

   

3. Save the client.
4. Click on the client to see its details.
5. Add OIDC external provider in Identity\portal , use the following ClientID and Client Secret
   

   

6. Authority should be filled with the issuer value from the output of the command in step 2.
   Note – in some cases one needs to use keycloak-url/auth/realms/master/.well-known/openid-configuration
   

7. Save the external provider.
8. Edit the KeyCloak client and add the redirect uri from the OIDC external provider config in Identity Service:
   
9. Save the client.