= keycloak = Open Source Identity and Access Management. * https://www.keycloak.org/ == Steps setup realm == {{{#!highlight bash wget https://github.com/keycloak/keycloak/releases/download/14.0.0/keycloak-14.0.0.zip unzip -t keycloak-14.0.0.zip cd ~/keycloak-14.0.0/bin sh standalone.sh http://localhost:8080/auth # admin admin admin create # http://localhost:8080/auth/admin/master/console/#/realms/master # Master, add realm, MyRealm , create # Users, add user, myuser # select user, credentials, mypwd mypwd, temporary off # Add role USER to MyRealm # Make user myuser have role USER # signout # http://localhost:8080/auth/realms/MyRealm/account/ # realm: MyRealm # user pwd: myuser mypwd # client id: curl_confidential # protocol: openid-connect # Curl_confidential settings: access-type confidential # valid redirect url http://localhost:8080 # tab credentials: regenerate secret 6dfe5f84-d115-4d3e-8a56-a0fcf5b2f13e curl -d 'client_id=curl_confidential' -d 'client_secret=6dfe5f84-d115-4d3e-8a56-a0fcf5b2f13e' -d 'username=myuser' -d 'password=mypwd' -d 'grant_type=password' 'http://localhost:8080/auth/realms/MyRealm/protocol/openid-connect/token' }}}