Authentication

 

Create client in Keycloak

1. Login to the administration console with the admin user.
2. Go to Clients > Create.
3. Enter ClientID (of your own choosing) called <CLIENT_ID>.
4. Click Save.
5. In Settings for this newly created client:
   1. Disable Standard Flow Enabled.
   2. Disable Direct Access Grants Enabled.
   3. Set Access Type to confidential.
   4. Enable Service Accounts Enabled.
   5. Click Save.
6. In Service Account Roles for this newly created client:
   1. In Client Roles select appropriate role as described in the table in section REST interfaces in Operations.
   2. Add role usage-allowed to Assigned Roles.
7. In Credentials for this newly created client, copy secret to Clipboard (called <CLIENT_SECRET>).

 

---

Get Token

 

Name	Value
Token Name	Choose any
Grant Type	Client Credentials
Access Token URL	server:port/auth/realms/trustcenter/protocol/openid-connect/token
Client ID	<CLIENT_ID>
Client Secret	<CLIENT_SECRET>
Scope	-
Client Authentication	Send as Basic Auth header