Updated Keycloak OIDC Integration (markdown)

Karim Gillani 2019-02-01 08:54:45 -08:00
parent c6ce5ec3c8
commit b6cdc8a6c7

@ -1,3 +1,5 @@
Outstanding Bug: When the user is registered, in the users entry in the mongo database, the following "profile" item is not being created "boardView" with value of "board-view-lists" Creating the entry manually resolves the issue.
Environment Variables that need to be set in your Wekan container:
OAUTH2_ENABLE = TRUE
@ -7,7 +9,35 @@ OAUTH2_AUTH_ENDPOINT = /realms/<keycloak realm>/protocol/openid-connect/auth
OAUTH2_USERINFO_ENDPOINT = /realms/<keycloak realm>/protocol/openid-connect/userinfo
OAUTH2_TOKEN_ENDPOINT = /realms/<keycloak realm>/protocol/openid-connect/token
OAUTH2_SECRET = <keycloak client secret>
** When creating a Client in keycloak, ensure the access type is confidential. After clicking save, you will have a Credentials tab. You can retrieve the secret from that location.
** When creating a Client in keycloak, ensure the access type is confidential under the settings tab. After clicking save, you will have a Credentials tab. You can retrieve the secret from that location.
Under the Client area in Keycloak, click on the Mappers area and "create" the following:
1. displayName
Name: displayName
Consent Required: Off
Mapper Type: User Attribute
User Attribute: displayName
Token Claim Name: displayName
Claim JSON Type: String
Add to ID token: on
Add to access token : on
Add to userinfo : on
Multivalued: off
2. id
Name: id
Consent Required: Off
Mapper Type: User Property
User Attribute: username
Token Claim Name: id
Claim JSON Type: String
Add to ID token: on
Add to access token : on
Add to userinfo : on
Edit the existing username mapper:
Token Claim Name: uid