Keycloak Configuration

Here follows some MedCo-specific instructions for the administration of Keycloak. For anything, please refer to the Keycloak Server Administration Guide.

Accessing the web administration interface

In the case of the development profile dev-local-3nodes (i.e. without reverse proxy), the address is http://localhost:8081/auth/admin. In the other cases (with the reverse proxy), the address is http://<node domain name>/auth/admin. The credentials are :

• User keycloak
• Password keycloak by default, or whatever else was configured at the initial deployment.

Disabling HTTPS requirement for external connections

When deploying the test-local-3nodes profile without HTTPS on a machine other than localhost, the administration interface will refuse to load. To solve this, access pgAdmin (see The PostgreSQL database) and execute the following SQL on the keycloak database:

update REALM set ssl_required = 'NONE' where id = 'master';

You need to restart the Keycloak docker container to enable the changes.

Manually add an authorized user

• Go to the configuration panel Users, click on Add user.
• Fill the Username field, toggle to ON the Email Verified button and click Save.
• In the next window, click on Credentials, enter twice the user’s password, toggle to OFF the Temporary button if desired and click Reset Password.

Add the default OpenID Connect client configuration for MedCo

• Go to the configuration panel Clients, click on Create.
• There specify in Client ID the value i2b2-local (or another value if previously configured) and click Save.
• In the next window, fill Valid Redirect URIs and Web Origins according to the table below and click Save.

Deployment Profile	Valid Redirect URIs	Web Origins
test-local-3nodes	http(s)://<node domain name>/glowing-bear	http(s)://<node domain name>
test-network	https://<node domain name>/glowing-bear	https://<node domain name>
dev-local-3nodes	http://localhost:4200	http://localhost:4200