Documentation

Support

Unity Cloud

Get Started

Creator SDKs and Services

Open Unity Dashboard

Unity Cloud

Create a service account in Keycloak

Create service accounts for programmatic access to Unity services
Read time 1 minuteLast updated 5 months ago
Service accounts are OAuth clients that use client credentials flow. To create a service account in Keycloak, complete these steps:
  1. In the admin console, switch to the unity realm.
  2. Select Manage > Clients.
  3. Select Create client.
  4. Provide these settings:

    Field

    Description

    Client typeOpenID Connect
    Client IDEnter a descriptive name. These practices are recommended:
    • Follow a naming convention. For example, you might want to use 
      sa-
      as a prefix for the names of service accounts.
    • Avoid using spaces. The client ID serves as a username for authentication, which might cause confusion.
    Client authenticationOn
    Standard flowDisabled
    Direct access grantsDisabled
    Service account rolesEnabled
After you have created the client, make these changes to its configuration:
  1. On the Client Scopes tab, keep only the following client scopes, which are default scopes, and delete the others:
    • <client-name>-dedicated
    • acr
    • email
    • profile
    • unity-token-ids
  2. Grant access to an organization and a project.
When you create a service account, Keycloak generates the client secret. To access this secret, go to the client properties, and then select the Credentials tab.