Create an organization in Keycloak

1. In the admin console, go to Manage > Clients.
2. Select Create client.
3. Provide these settings:

   Field	Description
   Client type	OpenID Connect
   Client ID	organization.<org-name>
   Name	Leave this field empty.
   Client authentication	On
   Authorization	On
   Standard flow	Disabled
   Direct access grants	Disabled
   Service account roles	Enabled

1. Create user roles for the organization. Roles represent the user types that a user can have in the organization. On the Roles tab, create these roles:
   • You must create at least these roles:

     Role name	Description
     organization.072429ce-8400-4b65-ac72-4b96e3278931	Owner user type
     organization.39943160-54da-49ac-b1c7-bf26adc65855	User user type
     organization.6685d32d-f81a-4aeb-b95e-159c791a72d8	Guest user type

     The recommended practice is to use the provided descriptions to avoid confusion later on.
   • Optionally, create additional roles for the organization and for projects. Learn more about these roles in the role-based access control (RBAC) reference.
2. On the Resources subtab of the Authorization tab, modify these settings:
   • Change the default resource type to

     organization

     .
   • To remove the associated URI, set it to an empty string.
   • If the console requires it, set the display name to

     <org-name>

     .
3. Save your changes.