...
Click on the Clients menu item on the left-side menu, this should load a list of authentication clients
Click on Edit (or click on the name link) on the item labelled dashboard in order to load the client
Open the dropdown for Login Theme and select the theme created for your reseller (E.g. my-reseller-theme)
Update the Valid Redirect URIs to include the URL you have configured for the Dashboard UI (remember to click the + plus icon after entering the value).
This will allow Keycloak to redirect back to your Dashboard UI after authenticating
Update the Web Origins to include the URL you have configured for the Dashboard UI (remember to click the + plus icon after entering the value).
This will allow CORS endpoint calls to Keycloak from the Dashboard UI.
Click the Save button at the bottom of the screen
(Required for Synergy) Setting up
...
Steps #1 Keycloak authentication flow
Go to
Authentication→Flow.Choose
Direct Grant, press the copy button and specify some name (i.e. X509 Direct Grant).
...
Remove everything apart from
Username Validation by selecting Actions -> Delete
...
Press
Add execution and select X509/Validate Username from the dropdown, and then press save.
...
You should get a view the same as below.
...
Navigate to
X509/Validate Username → Actions → Config.
Specify the name of the config.
...
Set User Identity Source to Subject's e-mail and User mapping method to Username or email.
...
Save it.
...
(Required for Synergy) Setting up a default Agent user
Steps #2 Keycloak client and user
This step is important and required for the agent to work correctly.
...
Click on the Users menu item on the left-side menu, this should load the Users list
Click the Add user button in the top right to open the Add user screen
It’s only necessary to complete two fields on this form; The Username field should contain agent, and the Email field should contain agent@gv.com:
Click the Save button at the bottom of the screen
(Required for Synergy) Setting up a default Agent user authentication
Steps #3 Keycloak client and user authentication
Go to Clients and select agent and choose Edit.
...
If agentdoes not exist, then press create, and specify Client ID as agent.
...
...
(Optional) Completing the Agent Client Configuration
...
Usually any issues which occur during the LDAP Active Directory configuration process above will be related to Network accessibility concerns or authentication credentials being incorrect.
Another way to troubleshoot your configuration is to check our Keycloak Manual Installation Guide, this configuration covers the entire Keycloak configuration process. This quick installation manual skips a lot of the manual installation steps which are included via the automatic import of the default configured realm on Keycloak installation.
However, if you require any additional support or your problem is not easily resolved by troubleshooting Network communications and authentication details, please reach out to our support at support@getvisibility.com
...