Login via keycloak

[hsok85]

Hello, I am trying to integrate keycloak with concourse. how can I set values???

[meezaan]

It works if you use OIDC or oAuth.

secrets:
  oidcClientId: client-id
  oidcClientSecret: secret

  auth:
    mainTeam:
        ## Authentication (Main Team) (OIDC),
        ##
        oidc:

          ## Comma-separated allow list of OIDC users.
          ##
          user: user1,user2

          ## Comma-separated allow list of OIDC groups.
          ##
          group: administrators

## Authentication (OIDC)
      oidc:
        enabled: true

        ## The auth provider name displayed to users on the login page
        ##
        displayName: Some name

        ## (Required) An OIDC issuer URL that will be used to discover provider configuration using the .wellKnown/openid-c 
       configuration
        ##
        issuer: https://keycloak.example.com/auth/realms/<<realm>>

        ## Any additional scopes that need to be requested during authorization
        ##
        scope: profile offline_access

        ## The groups key indicates which claim to use to map external groups to Concourse teams.
        ##
        groupsKey: roles

        ## CA Certificate
        ##
        useCaCert:

        ## Skip SSL validation
        ##
        skipSslValidation:

        ## The user name key indicates which claim to use to map an external user name to a
        ## Concourse user name.
        ##
        userNameKey: email