1341 - How to set up Keycloak as an IMS

The Redstor Storage Platform allows your organisation to replace internal single-factor authentication (i.e. username and password) with single sign-on (SSO) through Keycloak. Read more here.

To set up identity management through Keycloak, follow the steps below.

1. On the Control Centre home page, click on the gear (Settings) icon at the top right.

2. Select Other.

3. You will be prompted for the following information:

To obtain this information:

• Log into the Keycloak Admin Console.
• In the Master drop-down menu, click Add Realm. Enter a name and click Create.
• (optional) Configure the Realm's Token settings (token expiry, timeouts, etc.).
• Go to Clients > Add Client. Copy and paste the Client ID you create here into the Control Centre form. Select openid-connect as the Client Protocol and click Save.
• In the Settings tab, choose confidential as the Access Type to expose the Client Secret in a new Client > Credentials tab. Copy and paste this Client Secret into the Control Centre form.
• Enable Standard Flow and disable Implicit Flow.
• For Valid Redirect URIs, use the URI provided above the setup form in the Control Centre. 
  
  
  
  
• Use https://{KEYCLOAK_DOMAIN}/auth/realms/{REALM_ID}/.well-known/openid-configuration as the Discovery URI in the Control Centre form.

4. To complete the setup process in the Control Centre, leave the Extra Options field blank and click Submit.