Step 1: Configure Keycloak

ARTIFACTORY: How to configure OAuth SSO with KeyCloak

AuthorFullName__c
Md Mohsin Ali
articleNumber
000006055
ft:sourceType
Salesforce
FirstPublishedDate
2024-03-14T06:50:57Z
lastModifiedDate
2025-05-22
VersionNumber
1
1. Log in to KeyCloak’s Administration Console

User-added image

2. Select a desired realm or create a new one

User-added image


3. Create a new Client (Client => Create Client)

User-added image

4. Change the client type to “Open ID Connect”, select a unique Client ID (i.e “testoauth”), and click "Next"

User-added image

5. After clicking “Next”, we will be directed to “Capability Config” where we need to Enable “Client Authentication”, “Standard Flow” & “Service accounts roles”. Then, click on the “Next” button to move forward

User-added image

6. After clicking “Next”, we will be directed to “Login Settings”. We can enter http(s)://artURL:port/ui/login in “Home URL”, http(s)://artURL:port/artifactory/api/oauth2/loginResponse/* in “Valid redirect URIs” and /* in “Web origins”. Save the configuration to proceed further

User-added image

7. After clicking “Save”, we will be presented with the newly created Client’s settings page. Navigate to the “Credentials” tab and copy the “Client Secret” (this will be used later in Artifatory’s OAuth SSO’s Secret)

User-added image

8. Now, go to “Realm settings” and click on “OpenID Endpoint Configuration”. This will redirect to a page that lists all the required endpoints to be used on the Artifactory’s OAuth SSO side

User-added image