vaadin-sso-kit-keycloak-demo | configure Keycloak and use it as a SSO provider | Identity Management library

To run the demo, you have to run and configure Keycloak first. In this tutorial, we will do the following:. Note that the documentation is based on this Keycloak "Getting started" documentation: https://github.com/keycloak/keycloak-quickstarts/blob/latest/docs/getting-started.md.
run Keycloak locally using Docker
create a new realm in it
create at least one user in this new realm
create an OIDC client configuration so our application can use its details for login
Run Keycloak using docker run --name keycloak-ssokit -p 8280:8080 -e KEYCLOAK_ADMIN=admin -e KEYCLOAK_ADMIN_PASSWORD=admin quay.io/keycloak/keycloak:20.0.3 start-dev
Go to http://localhost:8280 to open Keycloak UI
Click on Administration Console and login to it using admin/admin
Create a new realm and name it ssokitrealm
Go to Users and create a new User. We will use this user to test the login functionality in the demo
Go to user Credentials to create a new password for the user
Once you set the password, you should see in the credentials:
Go to "Clients" section in the left menu and create a new client:
Use the following values in the client creation wizard: Client type: OpenID Connect Client ID: sso-kit-sample Name: sso-kit-sample Client authentication: On Authorization: On Authentication flow: Check only "Standard flow" (option "Service account roles" is checked and disabled)
Once you create the client, you are redirected to the Client Details
Scroll down and set the following values: Root URL: http://localhost:8080 Home URL: / Valid redirect URIs: http://localhost:8080/login/oauth2/code/keycloak Valid post logout redirect URIs: http://localhost:8080 Web origins: +
Scroll even lower on the same page to set the Logout settings: Front channel logout: Off (if you leave it enabled, the backchannel logout won't work) Backchannel logout URL: http://192.168.2.158:8080/logout/back-channel/keycloak (replace 192.168.2.158 with the IP of your computer, do not use localhost here) Backchannel logout session required: Off (backchannel logout won't work when left on On)
Do not forget to Save changes to your client
Scroll all the way up and go to client Credentials, copy the Client secret there and paste it to application.properties
That's it! Your instance of Keycloak is ready to be used
You must modify the application.properties and only change the client-secret value:.