Initial login to Keycloak and configure a redirect - v. 2.x
Summary: this page explains how to login to Keycloak for the first time and configure a redirect URI to ensure Console front-end can be accessed from wherever required.
The Console authentication providerhas been totally restructured in ≥ 2.x and uses the open-source OAuth2 compatible **Keycloak**system. Keycloak provides local authentication, and can also interact with other enterprise authentication systems such as LDAP and SAML. Before you start using Console, you should configure a redirect in Keycloak to allow access to Console using the Console host name or IP address in addition to localhost (which is pre-configured). If you do not, users will not be able to login to Console correctly. To do so, connect to Keycloak from any machine on the local network:
http://localhost:8086orhttp://<ip_address>:8086orhttp://<host_name>:8086
Click the Administration Console option:
The default login credentials are admin/admin unless these have been modified as part of the deployment process:
These credentials are specific to Keycloak and not Console. You can change the default password if required, post installation, using the following URL:
http://<console_server_hostname>:8086/auth/realms/master/account/#/security/signingin
Now click the Clients option and then click aip-console-client:
Click to enlarge
Now add a new redirect:
You should add a redirect for each URL you want Console to be accessible on. For example:
- http://<console_server_hostname>:8081/*
- http://<console_server_IP_address>:8081/*
Note that entering a “*” on it own without any URL or port numbers will ensure that Console is accessible on all URLs.
Ensure you save the changes:
