Keycloak User and Group Procedures

SOF Data Layer (SDL) User and Group Management

SDL Authentication Utilizes Keycloak

Accessing the Keycloak instance for your cluster

  1. Note the SDL/Data-Fabric URL used for accessing the WebGUI

  2. Append "/auth" to default URL, for example: https://{{ default_URL_for_accessing_SDL }}/auth

  3. Open a browser and navigate to the URL that includes the /auth path

  4. Click on Administration Console

  5. Login with provided credentials

SDL Users and Groups

For all SDL configurations, be sure to verify that Keycloak realm data-fabric` is selected from the upper-left drop-down. By default, the Master realm will be selected. > Note: Not completing this step of selecting the data-fabric realm will cause any subsequent configurations to be moot and invisible to SDL.

Creating Groups

Select Groups from the

  1. In the Groups pane, click Create group

  2. Input the desired name for the new group

  3. Click Create

Creating Users

Select Users from the

  1. In the User list pane, click Add user

  2. If the desire is to have the new user reset their password on their first login, then select Update Password from the field Required user actions

  3. Complete Username field with desired username for the new user account

  4. Complete any additional fields as necessary for new user account

  5. Add new user account to respective user groups by clicking Join Groups

  6. Click Create

Adding Existing Users to a Group

Select Users from the

  1. In the User list pane, click on the {{ username }} of user who will be added to a group

  2. In the {{ username }} pane, click on the Groups tab, near the top

  3. Click Join Group

  4. In the Join groups for user {{ username }} pane, select the checkboxes for each group that user should be included in. > Note: Multiple groups can be selected in this view.

  5. Click Join

There are many additional functions and features that can be configured and managed from Keycloak, however, these procedures only focus on the prediscussed topics for the current effort. For more information, please contact RAFT or consult Keycloak documentation.