Keycloak Configuration¶
Keycloak serves as the Identity and Access Management (IAM) solution for Data Privacy. It offers Single Sign-On (SSO) features, user management, and role-based access control (RBAC).
NOTE: After deployment, the login screen will not be accessible due to Keycloak restrictions. To resolve this, log in to Keycloak and update the client configurations for Data Privacy.
Client Configurations¶
To configure the client settings:
1. Access Keycloak: Open your browser and navigate to:
http://<hostname>/auth
- Username:
admin-demo - Password:
admin-demo
3. Switch to DataPrivacy Realm:
-
In the upper-left menu, ensure you are in the Keycloak realm.
-
The DataPrivacy realm is imported automatically when Keycloak starts. Click on DataPrivacy to switch to this realm.
4. Update Client Configuration:
- Navigate to Clients in the left menu.
-
Find the
dataprivacyIdclient and update the following fields:Text Only- **Root URL:** Set this to your hostname. - **Valid Redirect URIs:** Update to include the hostname.Example configuration:
Text OnlyRoot URL: https://<hostname> Valid Redirect URIs: https://<hostname>/*
5. Save the changes and verify the configuration.