Motivation
Find a user mangement system for ONAP to use which
- provides a GUI
- allows setup via REST
- doubles as oauth provider
Based on the requirements, Keycloak was chosen.
Version
Keycloak version 11.0.3 is used.
Setup
Known problems - regenerate/change secret
The "odlux.app" client in the "onap" realm, which is used for authentification from onap, gets created as a 'public' client.
To access the secret via the GUI, the access-type must be changed to 'confidential' and saved. Following, the 'credentials' tab gets visible in the GUI.
On the credentials tab, the current secret can be copied or a new one created.
Currently, the client can not be created as confidential via the REST API.