How to configure GitLab as an Identity Provider

Mon, 01 Jan 0001 00:00:00 +0000

You can use Gitlab identity provider for Keycloak

Overview

Create Application in Gitlab

Open https://gitlab.com/groups/<YOUR_GROUP>/-/settings/applications
Click Add new application
Name: cozy, Redirect URI: https://keycloak.<root-host>/realms/cozy/broker/gitlab/endpoint
Enable Confidential, api, read_api, read_user, openid, profile, email
Copy and save Secret

Configure Keycloak Identity Provider

Create a KeycloakRealmIdentityProvider resource with the following configuration:

apiVersion: v1.edp.epam.com/v1
kind: KeycloakRealmIdentityProvider
metadata:
 name: gitlab
spec:
 realmRef:
 name: keycloakrealm-cozy
 kind: ClusterKeycloakRealm
 alias: gitlab
 authenticateByDefault: false
 enabled: true
 providerId: "gitlab"
 config:
 clientId: "YOUR GITLAB APP ID"
 clientSecret: "YOUR GITLAB APP SECRET"
 syncMode: "IMPORT"
 mappers:
 - name: "username"
 identityProviderMapper: "oidc-username-idp-mapper"
 identityProviderAlias: "gitlab"
 config:
 target: "LOCAL"
 syncMode: "INHERIT"
 template: "${ALIAS}---${CLAIM.preferred_username}"

How to configure Google as an Identity Provider

Mon, 01 Jan 0001 00:00:00 +0000

Configure Google

Head over to Google Console, login in to the console using Google account and you will see Google Developer Console. Once logged in, head over the top left drop-down to create new project.
Click on “New Project” to proceed.
Enter the project name of your choice and select the Organisation if you have multiple organisations. Once done click on “Create”
Once the project is created you will get a pop-up suggesting to configure the consent screen. If not then head over to the Dashboard and head over to “Explore and enable APIs” options. Then Click on “Credentials” > “Configure Consent Screen” and head over to the next step.

Identity providers on Cozystack

How to configure GitLab as an Identity Provider

Overview

Create Application in Gitlab

Configure Keycloak Identity Provider

How to configure Google as an Identity Provider

Configure Google