Skip to content

Keycloak Configuration

Keycloak serves as the Identity and Access Management (IAM) solution for TDM. It offers Single Sign-On (SSO) features, user management, and role-based access control (RBAC).

Important

After deployment, the login screen will not be accessible due to Keycloak restrictions. To resolve this, log in to Keycloak and update the client configurations for TDM.

Info

  • If you experience issues accessing the Keycloak interface after deployment, it may be related to your browser compatibility.
  • Please verify that you are using one of the supported browser versions listed in the Before Installation – Supported Browser Versions section.

Client Configurations

To configure the client settings:

1. Access Keycloak: Open your browser and navigate to:

Text Only
https://<hostname>/auth

2. Login and Switch to TDM Realm:

  • In the upper-left menu, ensure you are in the Keycloak realm.

  • The TDM realm is imported automatically when Keycloak starts. Click on tdm to switch to this realm.

3. Update Client Configuration:

  • Navigate to Clients in the left menu.

  • Find the tdmuid client and update the following fields:

    Text Only
    Root URL: Set this to your hostname.
Valid Redirect URIs: Update to include the hostname.

    Example configuration:

    Text Only
    Root URL: https://<hostname>
Valid Redirect URIs: https://<hostname>/*

4. Save the changes and verify the configuration.