keycloak

Keycloak

1. Select/create a Realm and Client. Select a Client and visit Settings.
2. Client Protocol: openid-connect
3. Access Type: confidential
4. Standard Flow Enabled: On
5. Configure Root URL such as http://vault.example.com
6. Configure Valid Redirect URIs such as
   • http://vault.example.com/ui/vault/auth/oidc/oidc/callback
   • http://vault.example.com/oidc/oidc/callback
7. Save.
8. Visit Credentials. Select Client ID and Secret and note the generated secret.