keycloak-scim/topics/secure-jboss-app/subsystem.adoc

=== Configure Subsystem

Now that you have copied the XML template from the `Installation` tab, you need to paste this into the _standalone.xml_ file
that lives in the _standalone/configuration_ directory of the application server instance your application is deployed on.
Open this file and search for the following text:

[source,xml]
----
<subsystem xmlns="urn:jboss:domain:keycloak:1.1"/>
----

Modify this a little bit to prepare it for pasting in your template from the `Installation` tab.

[source,xml]
----
<subsystem xmlns="urn:jboss:domain:keycloak:1.1">
</subsystem>
----

Within the `subsystem` element, paste in the template.  It will look something like this:

[source,xml]
----
<subsystem xmlns="urn:jboss:domain:keycloak:1.1">
  <secure-deployment name="WAR MODULE NAME.war">
    <realm>demo</realm>
    <auth-server-url>http://localhost:8180/auth</auth-server-url>
    <public-client>true</public-client>
    <ssl-required>EXTERNAL</ssl-required>
    <resource>vanilla</resource>
  </secure-deployment>
</subsystem>
----

Change the `WAR MODULE NAME` text to be `vanilla` as follows:

[source,xml]
----
<subsystem xmlns="urn:jboss:domain:keycloak:1.1">
  <secure-deployment name="vanilla.war">
  ...
</subsystem>
----

Reboot your application's server and now when you visit http://localhost:8080/vanilla and hit the login button, you should
get the {{book.project.name}} login page. You can log in using the user you created in the <<fake/../../first-realm/user.adoc#_create-new-user, Create New User>> chapter.