Keycloak OIDC

Note: configured, but not yet tested

Configuration Keycloak, which is based on OpenID (OIDC).

Adjust scope values according to your needs.

The authorizationEndpoint format with Keycloak:

https://<keycloak hostname>/realms/<keycloak realm>/protocol/openid-connect/auth

keycloak: {
  clientId: '', // the clientId that is registered with your Keycloak server
  redirectUri: '', // the path of your app which will be receiving the call back from Keycloak
  name: 'keycloak',
  url: '/auth/keycloak', 
  authorizationEndpoint: 'https://keycloakurl.com/realms/yourrealm/protocol/openid-connect/auth',
  requiredUrlParams: ['display', 'scope'],
  scope: ['read_user', 'profile'],
  scopeDelimiter: '',
  display: 'popup',
  oauthType: '2.0',
  popupOptions: { width: 580, height: 700 }
}

References

• Securing Applications and Services Guide
• OpenID