Skip to content
This repository has been archived by the owner on Dec 24, 2023. It is now read-only.

Latest commit

 

History

History
42 lines (31 loc) · 1.61 KB

INSTALL.md

File metadata and controls

42 lines (31 loc) · 1.61 KB

Keycloak oauth plugin for GoCD

Requirements

Installation

Copy the file build/libs/keycloak-oauth-authorization-plugin-VERSION.jar to the GoCD server under ${GO_SERVER_DIR}/plugins/external and restart the server. The GO_SERVER_DIR is usually /var/lib/go-server on Linux and C:\Program Files\Go Server on Windows.

Configuration

Provide details of the Keycloak server to connect to via an Authorization Configuration.

Configure Keycloak Client

  1. Sign in Keycloak Console
  2. Select the realm that you want to configure. Ex. Master
  3. Click in Clients menu
  4. Click Add button
  5. On the form insert the client name
  6. On the next page, set this configs:
    1. In Access Type select Confidential
    2. In Valid Redirect URIs insert the URL of GoCD, ex.: http://localhost:8153
    3. In Credentials tab copy value of Secret

Create Group Configuration

  1. Sign in Keycloak Console
  2. Select the realm that you want to configure. Ex. Master
  3. Click in Groups menu
    1. Click Add Group button
    2. Insert the name of Group and it description
    3. Save the Group
    4. Select the user that you want to configure this role
    5. Select Groups tab and select the group in Available Groups

Obs.: By default Keycloak do not provide group definition on user session, to get this, edit profile scope and add groups in Mappers tab, thie scope needs to be added as builtin.