OpenID Connect integration with Keycloak

Step 1. Creating Client Scopes

1. Sign in to the Keycloak admin console.
2. Go to Client scopes.

3. Click Create client scope

4. Fill in the required fields, select the OpenID Connect protocol and save.

---

Step 2. Creating a Client

1. Go to Clients.

2. Click Create client.

3. Fill in Client type by selecting the OpenID Connect protocol, and fill in Client ID.

4. Turn on Authorization and select Implicit flow.

5. Specify Valid redirect URIs (multiple values are allowed).

Note

The redirect URI must contain the domain name on which the flip app runs.

---

Step 3. Additional client configuration

1. Review the client settings and adjust them if needed.

2. Get the Client Secret on the Credentials tab.

Important

The Client ID and Client Secret are entered when you configure SSO in the flip interface; they are not added to the backend configuration file.

3. Add the previously created Client Scope to this client.

Note

Enter the data you obtained as described in the SSO setup guide.