BCDevOps / devops-requests

This repository is used to track the DevOps requests for platform services team.
18 stars 10 forks source link

HETS KeyCloak Realm Request #1189

Closed ychung-mot closed 3 years ago

ychung-mot commented 3 years ago

If you have an urgent request, please contact our Product Owner at Vardhman.Shankar@gov.bc.ca

Step 0

Are you the product owner or project admin/team lead? Yes

Note: This SSO service is undergoing upgrades in 2021 and is currently not recommended for critical applications. Support is currently available only during business hours and only on a best efforts basis. If your application is critical, please contact Web Access Management (WAM) and/or Provincial Identity Information Management Program (IDIM).

Step 1

Are you new to Single Sign-On (Keycloak)? No

Step 2

Field the following information.

Step 3

Field the following information.

Step 4

For teams requesting access to BCeID, there is an approval process. Please provide the following information on this ticket. The IDIM team will review this information and will be in touch with you at the email provided. The OCP-SSO team will provision your DEV and TEST clients right away, and your PROD client will be provisioned when the IDIM team approves your request.

Step 5

Submit this ticket and email us the contact information.

For security purpose, please provide the following contact information to the email address - Vardhman.Shankar@gov.bc.ca

Please note that we will only start processing your request when the email has been received.

nvunnamm commented 3 years ago

@ychung-mot, Please let us know the best suitable date for your team for the onboarding session. So that I can send an invite.

ychung-mot commented 3 years ago

@nvunnamm Does 1pm tomorrow (June 30th) work for you?

nvunnamm commented 3 years ago

Yeah works for us.. Let me send out an invite

ConradBoydElliottGustafson commented 3 years ago

@junminahn @nvunnamm @ychung-mot

Young-Jin got back to us. They want public client with PKCE. Please update the TerraForm files and make a pull request. Niran may need support from Junmin as this is the first time we have done this. Thank you!

ychung-mot commented 3 years ago

@nvunnamm Can you please confirm that the redirect URIs are all registered? I am getting Invalid parameter: redirect_uri error when using http://localhost:3000.

uri error

junminahn commented 3 years ago

@ychung-mot Yes, we updated the valid_redirect_uris to have http://localhost:3000 yesterday. https://github.com/bcgov/sso_terraform/blob/0e3b3b6d6544dba82f498c4919ae2e5c24e48a5b/terraform/keycloak-dev/realms/onestopauth-business/client-hets.tf#L6

ychung-mot commented 3 years ago

@junminahn Can you please also check if the Web Origins is set to +?

weborigins

junmin-bcgov commented 3 years ago

@ychung-mot thank you for bring that up, yes, that update just got merged. https://github.com/bcgov/sso_terraform/pull/31/files

ychung-mot commented 3 years ago

Can you please let me know token expiration minutes?

nvunnamm commented 3 years ago

@ychung-mot Please let me know if the attachment helps

Screen Shot 2021-07-22 at 1 54 20 PM
junminahn commented 3 years ago

@ychung-mot as we don't set any expiry values at the client level, it will fall back to the ones at the realm level.

ychung-mot commented 3 years ago

@nvunnamm & @junminahn Thanks!