You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/hosting/authentication.md
+3-2Lines changed: 3 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -26,8 +26,8 @@ There are two ways to integrate external identity providers (e.g. Google, [EGI C
26
26
Create both a private and a public client in the external provider (this step is required for both options below).
27
27
28
28
### Option 1: Update the configuration files
29
-
- Replace `KEYCLOAK_CLIENT_SECRET` in `.env.override` with the value provided by the external IdP.
30
-
- Update `server_url`, `client_idr`, `client_id_swagger``openid_connect_url` and `scopes` in `./src/config.override.toml`.
29
+
- Replace `KEYCLOAK_CLIENT_SECRET` in `override.env` with the value provided by the external IdP.
30
+
- Update `server_url`, `client_id`, `client_id_swagger``openid_connect_url` and `scopes` in `./src/config.override.toml`.
31
31
- In this setup, the Keycloak container is not required and can be shut down.
32
32
### Option 2: use keycloak as an identity broker
33
33
- Details can be found in the Keycloak documentation: [Integrating identity providers](https://www.keycloak.org/docs/latest/server_admin/index.html#_identity_broker).
@@ -47,6 +47,7 @@ These are the roles the metadata catalogue uses (`*` in a role indicates its def
47
47
*`update_*`: allows the user update permission for all assets on the platform, regardless of the asset-specific permissions.
48
48
*`delete_*`: allows the user delete permission for all assets on the platform, regardless of the asset-specific permissions.
49
49
*`create_platforms`: allows the user to define new platforms.
50
+
*`platform_NAME`: identifies the 'user' as being allowed to register assets of platform 'NAME', used for connectors.
50
51
51
52
Note that roles may be used for services other than the metadata catalogue.
52
53
New roles can be created from the admin console, see ["Creating a realm role"](https://www.keycloak.org/docs/latest/server_admin/index.html#proc-creating-realm-roles_server_administration_guide).
0 commit comments