...
Click on the Clients menu item on the left-side menu, this should load a list of authentication clients
Click on Edit (or click on the name link) on the item labelled dashboard in order to load the client
Open the dropdown for Login Theme and select the theme created for your reseller (E.g. my-reseller-theme)
Update the Valid Redirect URIs to include the URL you have configured for the Dashboard UI (remember to click the + plus icon after entering the value).
This will allow Keycloak to redirect back to your Dashboard UI after authenticating
Update the Web Origins to include the URL you have configured for the Dashboard UI (remember to click the + plus icon after entering the value).
This will allow CORS endpoint calls to Keycloak from the Dashboard UI.
Click the Save button at the bottom of the screen
(Required for Synergy) Setting up Agent authentication flow
Steps #1 Keycloak authentication flow
Go to
Authentication→Flow.Choose
Direct Grant, press the copy button and specify some name (i.e. X509 Direct Grant).
...
Remove everything apart from
Username Validation by selecting Actions -> Delete
...
Press
Add execution and select X509/Validate Username from the dropdown, and then press save.
...
You should get a view the same as below.
...
Navigate to
X509/Validate Username → Actions → Config.
Specify the name of the config.
...
Set User Identity Source to Subject's e-mail and User mapping method to Username or email.
...
Save it.
...
(Required for Synergy) Setting up a default Agent user
Steps #2 Keycloak client and user
This step is important and required for the agent to work correctly.
...
Click on the Users menu item on the left-side menu, this should load the Users list
Click the Add user button in the top right to open the Add user screen
It’s only necessary to complete two fields on this form; The Username field should contain agent, and the Email field should contain agent@gv.com:
Click the Save button at the bottom of the screen
(Required for Synergy) Setting up a default Agent user authentication
Steps #3 Keycloak client and user authentication
Go to Clients and select agent and choose Edit.
...
If agentdoes not exist, then press create, and specify Client ID as agent.
...
Go to the very bottom of the page to the Authentication Flow Overrides , then to Direct Grant Flow and set it to X509 Direct Grant. Save.
...
(Optional) Completing the Agent Client Configuration
...