Keycloak User Management

Using Azure AD as Identity Provider

1. In the Keycloak config page, select Identity Providers from left hand panel and choose OpenID Connect v1.0
   
   
2. Give an Alias name (E.g. azuread)
3. Give a Display Name (E.g. Azure AD)
   
   
4. Copy Redirect URI information for use in Synergy SKY Management Suite

Register Application in Azure AD

1. Go to aad.portal.azure.com and log in
   
   
2. Select App Registrations and then click New Registration
   
   
3. Give application a Name (E.g. Keycloak Demo)
   
   
4. Select the Supported account types (E.g. Single Tenant)
   
   
5. Select Web for Redirect URI and paste link copied from Keycloak configuration page
   
   
6. Click on Register
   
   
7. Click on Endpoints on next screen and copy the OAuth 2.0 authorization endpoint (v2) and OAuth 2.0 token endpoint (v2) to the associated fields in Keycloak
   
   
   
   
8. Close the Endpoints window and copy the Application (client) ID to the Client ID section of Keycloak, setting the Client Authentication method to Client secret sent as post
   
   
9. A Client Secret is now required.
   
   
10. In Azure AD, select Certificates & secrets and then click New client secret
    
    
11. Add a Description (E.g. Keycloak Secret) and set the Expires timeframe (N.B. make a note of this if needing to renew at a future time) then click on Add
    
    
12. Copy the Value of the secret once done
    
    
13. Paste the secret into the Client Secret section in Keycloak configuration and add some Default Scopes (E.g. openid profile email) and then click on Save at the bottom of the page.