기술 자료

지원

Create a user in Keycloak

Manually create users if you work in local-only mode or without SSO-only configuration
읽는 시간 2분최근 업데이트: 4일 전
After you have set up single sign-on (SSO) for the realm, Keycloak automatically provisions an account for each user on their first sign-in via the enterprise identity provider (IdP). On subsequent sign-ins, Keycloak updates the user properties based on the information from the IdP. Nevertheless, you might need to create user accounts in Keycloak in these cases:
  • You use Keycloak in local-only mode, that is, with only local users.
  • You haven't applied SSO-only configuration. Read more about configuring the user experience.
To create users in Keycloak, complete these steps:
  1. In the Keycloak admin console, switch to the unity realm.
  2. Go to Manage > Users.
  3. Select Add user.
  4. Provide these settings:

Field

Description

User nameA unique name for the user. The recommended practice is the email address.
E-mailThe user's email address.
First nameThe user's first name.
Last nameThe user's last name.
Full nameThe user's full name, for example, 
Firstname Lastname
. This field is optional. If you fill this field, you can leave the first and last names empty. If you don't fill this field, the full name is constructed dynamically from the first and last names. Unity Asset Manager utilizes only the full name without distinction between the first name and the last name.
After you have created the user, change the configuration as follows:
  1. On the Credentials tab, set a password so that the user can sign in.
  2. Instruct the user to sign in for the first time. Refer the note hereinafter.
  3. Grant access to an organization and to a project.
참고
The system doesn't add new users to the Asset Manager organization when creating them in Keycloak, but only during their first sign-in, with the User user type. In other words, before new users can appear as organization members in Unity Asset Manager, they must sign in first.
  • This process happens seamlessly for SSO users within the same first sign-in flow via the enterprise IdP: they are automatically provisioned in Keycloak and then added to the organization right after that.
  • Local users need to sign in first to be added to the organization members. Only then administrators can assign additional user types and roles to them.