Overview
This section describes the requirements for the integration and the setup of the keycloak server.
Requirements
The following prerequisites are required to complete the integration:
- SafeNetKeycloakAgentpackage.zip v1.2.0.
- Running instance of SAS PCE server v3.13.xx.
- Running instance of for Keycloak container v15.0.2.
- Running instance of IDPV Server v2.x.
- IDPV Client 2.x installed on Windows 10.
- Microsoft Active Directory Windows 2016 for synchronizing user identities to SAS PCE database (Optional).
You can use any other supported user data store. We use Microsoft AD Windows 2016 for the integration.
Prerequisites to Set up the Keycloak Server
To install a Keycloak server, refer to Server Installation and Configuration Guide. For this integration, we run a Keycloak server in standalone mode on a Windows 2016 server.
Before configuring the Keycloak server, ensure that:
-
An IP address is attached to the public interface. (For more information about public interface, refer to Keycloak Documentation).
-
A valid SSL certificate is bound to the public interface so IDPV client trusts the keycloak server. (For information on SSL certificate, refer to Keycloak Documentation).
-
Admin account access is required to create realm and install SafeNet Agent for Keycloak Server, refer to Creating the first administrator.
To configure the Keycloak server, install the SafeNet Agent for Keycloak v1.2.0 on this server so that it can communicate with SAS PCE for authenticating users.