Skip to content

Latest commit

 

History

History
26 lines (20 loc) · 2 KB

proc_configuring-project-settings-for-keycloak-authentication-using-the-web-ui.adoc

File metadata and controls

26 lines (20 loc) · 2 KB

Configuring {Project} Settings for {Keycloak} Authentication Using the Web UI

Use this procedure to configure {Project} settings for {Keycloak} authentication using the {ProjectWebUI}.

Note that you can navigate to the following URL within your realm to obtain values to configure {Project} settings: https://{Keycloak-short}.example.com/auth/realms/{Project}_Realm/.well-known/openid-configuration

Prerequisite

  • Ensure that the Access Type setting in the {Project} client in the {Keycloak} web UI is set to confidential

Procedure

  1. In the {ProjectWebUI}, navigate to Administer > Settings, and click the Authentication tab.

  2. Locate the Authorize login delegation row, and in the Value column, set the value to Yes.

  3. Locate the Authorize login delegation auth source user autocreate row, and in the Value column, set the value to External.

  4. Locate the Login delegation logout URL row, and in the Value column, set the value to https://{foreman-example-com}/users/extlogout.

  5. Locate the OIDC Algorithm row, and in the Value column, set the algorithm for encoding on {Keycloak} to RS256.

  6. Locate the OIDC Audience row, and in the Value column, set the value to the client ID for {Keycloak}.

  7. Locate the OIDC Issuer row, and in the Value column, set the value to https://{Keycloak-short}.example.com/auth/realms/{Project}_Realm.

  8. Locate the OIDC JWKs URL row, and in the Value column, set the value to https://{Keycloak-short}.example.com/auth/realms/{Project}_Realm/protocol/openid-connect/certs.

  9. In the {ProjectWebUI}, navigate to Administer > Authentication Sources, click the vertical ellipsis on the External card, and select Edit.

  10. Click the Locations tab and add locations that can use the {Keycloak} authentication source.

  11. Click the Organizations tab and add organizations that can use the {Keycloak} authentication source.

  12. Click Submit.