Keycloak
Create a realm
- Click on the dropdown in the topleft corner where it says
Master, then click onCreate Realm\\
 (1) (2) (1).png)
Realm name input
 (2) (1).png)
Create a client
- Click the
Clientsmenu item in the left sidebar
 (1) (1).png)
- Then click the
Create clientbutton\\
 (1).png)
 (1).png)
Client authentication checkbox\\
 (1).png)
Valid redirect URIs field.\\
 (1).png)
Create IdentityProvider in Aidbox
- Open REST console in AidboxUI and create IdentityProvider resource
yaml
POST /IdentityProvider
scopes:
- profile
- openid
system: keycloak
authorize_endpoint: <keycloak-url>/realms/<your-realm>/protocol/openid-connect/auth
token_endpoint: <keycloak-url>/realms/<your-realm>/protocol/openid-connect/token
userinfo_endpoint: <keycloak-url>/realms/<your-realm>/protocol/openid-connect/userinfo
userinfo-source: id-token | userinfo-endpoint
client:
id: <your client id>
secret: <your client secret>
resourceType: IdentityProvider
title: Keycloak
active: true
id: keycloakYou can find client secret on Clients details page under Credentials tab
 (1).png)
Login into Aidbox
Go to your Aidbox base URL, you will be redirected to the login page - you should see "Log in with Keycloak" button. Press this button and log in with Keycloak user into aidbox. This user will be logged into Aidbox Console, but without any permissions. Read more in Access Control about permissions.