This is dockerised Keycloak system. Keycloak support openid_connect.
This project is part of "Transformation Numérique" project from FFCU.
It's designed to be connected to a Dolibarr instance and other partners applciations.
## Setting up your environement
## Setting up your environement
1. Clone this repository
1. Clone this repository
2.`cp .env.sample .env`
2.`cp .env.sample .env`
3. Edit .env (host, keycloak admin credential and MariaDB password)
3. Edit .env (host, keycloak admin credential and MariaDB password)
4. Run KeyCloak with docker-compose
## Secure the first application
## Launch environement
To secure the first application, folow [this tutorial](https://www.keycloak.org/getting-started/getting-started-docker) but start docker with the docker compose.
`docker-compose up`
## SSO with dolibarr
## Configuration
### Create realm, first user and connect first application
Follow the official [get started tutorial](https://www.keycloak.org/getting-started/getting-started-docker)
## Link a Dolibarr instance to Keycloak
### Prerequisites
### Prerequisites
set un dockerised [Dolibarr](https://gitlab.tetras-libre.fr/nocloud/docker/dolibarr)
Set un dockerised [Dolibarr](https://gitlab.tetras-libre.fr/nocloud/docker/dolibarr)
### Set up
### Set up
To set up SSO with dolibarr you need folow this insctruction :
To set up SSO with dolibarr you need folow this insctruction :
1. Create user with the same username in dolibarr and keycloak
1. Create user with the same username in dolibarr and keycloak
...
@@ -27,4 +35,4 @@ To set up SSO with dolibarr you need folow this insctruction :
...
@@ -27,4 +35,4 @@ To set up SSO with dolibarr you need folow this insctruction :
3. Put generated variable in dolibarr > Setup > Other Setup
3. Put generated variable in dolibarr > Setup > Other Setup
4. Configure the authentication methods in conf.php (dolibarr_src/htdocs/conf/conf.php) and add openid_connect. `$dolibarr_main_authentication='openid_connect'`
4. Configure the authentication methods in conf.php (dolibarr_src/htdocs/conf/conf.php) and add openid_connect. `$dolibarr_main_authentication='openid_connect'`
For many information, folow the [dolibarr tutorial](https://wiki.dolibarr.org/index.php?title=Authentication,_SSO_and_SSL#Mode_openid_connect)
For many information, follow the [dolibarr tutorial](https://wiki.dolibarr.org/index.php?title=Authentication,_SSO_and_SSL#Mode_openid_connect)