Set up the identity subsystem
Set up the identity subsystem, based on Keycloak
Read time 1 minuteLast updated a month ago
Unity Virtual Private Cloud includes an identity provider and broker component based on Keycloak. Keycloak includes these major capabilities:
- Authentication and authorization
- Storage of information about users and service accounts keys
Keycloak is included in the above deployment, but you must perform customer-specific postdeployment and administration tasks.
1. Access Keycloak
Access the Keycloak admin console at .
https://<your-domain>/authChange the default admin credentials
The keycloak admin credentials are static and aren't tied to any identity provider.
When you sign in for the first time, change the default admin credentials:
- In the Keycloak admin console, switch to the default realm, that is, the master realm.
- Go to Users, and then select the user.
admin - On the Credentials tab, select Reset password.
- Enter a new password.
- Turn off Temporary.
- Record the credentials somewhere secure.
2. Complete the setup of the identity subsystem
To complete the setup of the identity subsystem, ensure that you are signed in to Keycloak, and then go to the unity realm.
2.1 Set up the URI properties for the dashboard client
To redirect the browser back to the frontend after a successful sign-in, add a valid redirect URI.
-
Go to Manage > Clients, and then select the dashboard client.
-
On the Settings tab, modify these values:
- Set Root URI to .
https://<solution-domain-name> - Set Valid redirect URIs to .
https://<solution-domain-name>/*
- Set Root URI to
-
Select Save.
3. Perform administration tasks
-
Complete the initial solution onboarding.
-
If required, set up single sign-on (SSO) for the identity subsystem.
-
If you don't use SSO, then create users in Keycloak.
-
Grant user access to the organization.
-
Optionally, configure monitoring integration in parallel or later.
After you have completed these steps, users can access the application.