...
To quickly get started on Keycloak and for ease of testing, we recommend installing Keycloak via Docker in your local development environment.
Do follow the guide until the part where you have successfully created a sample user in Keycloak & verify by logging in with this new user credentials in the Keycloak Account Console.
At this point of time after completing the Keycloak installation tutorial, you should have these ready in Keycloak:
- A separate realm called myrealm
- A sample user created and verified able to login
Tip title Tip If your Joget instance currently does not have a license, it is limited to free first 3 users only, sorted alphabetically.
For ease of testing, you can create a sample user with username of cactus-jim for example.
| Note | ||
|---|---|---|
| ||
In this tutorial, it is presumed that the Keycloak instance will be running and exposed on the same host machine running your Joget instance. In this case, since the default bundled Tomcat server hosting the Joget platform operates on port 8080 by default, do ensure the deployed Keycloak container does not clash with the same host port. For example, you can map Keycloak container to expose on host port 8500 or any other non-clashing port instead. |
At this point of time after completing the Keycloak installation tutorial, you should have these ready in Keycloak:
- A separate realm called myrealm
- A sample user created and verified able to login
Tip title Tip If your Joget instance currently does not have a license, it is limited to free first 3 users only, sorted alphabetically.
For ease of testing, you can create a sample user with username of cactus-jim for example.
2. Plugin Installation
- Download the SAML Directory Manager Plugin from the Joget Marketplace, and upload the plugin .jar file into your Joget instance.
This plugin's source code is also available in JogetOSS Github. Projects under JogetOSS are community-driven and community-supported, and you are welcome to contribute to the projects. - Then, in Admin Bar → Settings → General Settings → API IP Whitelist, do whitelist external IP addresses. For now, you can allow all public users (using * symbol to indicate "allow all").
This is to allow end user browsers to communicate with the SAML plugin.
- Save the settings.
...