Keycloak Deployment Recipe
Use Keycloak when the customer needs a self-hosted identity provider for Governance Platform.
Configure Keycloak
Section titled “Configure Keycloak”Prepare a realm, browser client, backend client, service-account permissions, and redirect URIs for the customer platform domain. Use the deployment guide that matches the customer cloud environment.
Bootstrap
Section titled “Bootstrap”The deployment repository includes a Keycloak bootstrap chart and helper scripts for creating required clients and post-install database state. Review generated values and secrets before installation.
Validate
Section titled “Validate”After install, validate browser login, Auth Service token exchange, organization membership, project membership, and governance-worker service-account behavior when automated declarations are enabled.