Yes, Athento has integration with Keycloak with several use cases working.
Enter the environment and go to advanced options:
On this page, search for "Keycloak":
Create Server
We define a server, using the Auth URL corresponding to the same Keycloak environment:
Create Realm
Define a Realm, which will use the previously defined server:
Reload the internal configurations with the created Realm marked:
IMPORTANT: Perform all these steps without logging out, if you log out, you will not be able to log back in (by SSO):
- Refresh OpenID Connect .well-known (Esto refresca los parámetros del campo "well known oidc" en "realms")
- Refresh Certificates
- Clear client tokens
Settings in settings_custom/local_settings.py
For these steps, if you don't have access to the server, request your application in soporte@athento.com
Next, modify the configuration in the following file: /var/www/athentose/athentose/athentose/settings_custom/local_settings.py
and add the following properties..:
LOGIN_URL = 'keycloak_login'
KEYCLOAK = True
USE_KEYCLOAK = True
KEYCLOAK_CREATE_USER = True
LOGIN_PAGE_URI = '/keycloak/login'
DEFAULT_KEYCLOAK_USER_TEAM_ID = 1
In the AUTHENTICATION_BACKENDS property, add:
athentose.auth_backends.backends.AthentoSEKeycloakAuthorizationCodeBackend
In the MIDDLEWARE property, add:
django_keycloak.middleware.BaseKeycloakMiddleware
Perform a reload of the services with: /var/www/athentose; ./scripts/soft_reload.sh
Comments
0 comments
Please sign in to leave a comment.