Learn how to remove Siteminder and replace with direct IDIR AD IDP

[ActionAnalytics]

Describe the issue Platform Services has a working implementation of KeyCloak supporting IDIR via direct Active Directory Identity Provider, which insulated them from the Siteminder outage of Aug 10 which impacted the user community of CPFs products and services.

Additional context

• Nick Corcoran implemented the solution
• We would likely need to create new users (well, direct existing siteminder users to hit the new endpoint auth)

Definition of done

• Connect with Nick C for 30 minute meeting, record video of his walkthrough of how he did this for Platform Services and invite Mark L and Meredith O-M from the Parks team to come along and watch (CRM "BC Parks Attendance")
• Ask Nick if possible to transfer existing user stubs from siteminder to AD version (maybe via editing the existing - try this in Dev first please)
• Store the video in our Team training area in Teams
• Implement the solution in our two KeyCloak realms (one for Dev/Test, one for Prod)

[ActionAnalytics]

The meeting happened, we learned how, and we made tickets to accomplish this