Test keycloak federation

[ad2ien]

After keycloak is deployed, and with MIPIH, explore keycloak federation.

[ad2ien]

Successfully tested with an other keycloak

on the new keycloak

• Create a client with secret
• set valid redirect URI e.g. https://idp.lagraulet.eimis.incubateur.net/*
• Create a user (with an e-mail that is not already used by a Synapse users) and a password

on EIMIS keycloak

• go to EIMIS keycloak admin console of eimis-realm
• go to Identity provider
• add new provider Keycloak OpenID Connect
• enter the discovery endpoint https://[hostname]/auth/realms/master/.well-known/openid-configuration
• set client id and secret

Test

• Load element, clic on EIMIS Connect
• -> get redirected to eimis keycloak
• click on the created id provider
• login with user credential
• -> get logged in 🎉

[ad2ien]

Meeting done with Mipih to validate the architecture. Waiting for their test realm client credentials. Then we should merge keycloak PR to preprod and configure it before testing with test Mipih users

[ad2ien]

344 created for next sprint