59 lines
2.8 KiB
Markdown
59 lines
2.8 KiB
Markdown
Keycloak social
|
|
===============
|
|
|
|
This document describes how to configure social providers for Keycloak. At the moment social providers are configured globally using system properties. These can either be passed using '-D' when starting the application server or added to the standalone.xml file, for example:
|
|
|
|
<system-properties>
|
|
<property name="keycloak.social.facebook.key" value="<facebook key>"/>
|
|
<property name="keycloak.social.facebook.secret" value="<facebook secret>"/>
|
|
<property name="keycloak.social.google.key" value="<google key>"/>
|
|
<property name="keycloak.social.google.secret" value="<google secret>"/>
|
|
<property name="keycloak.social.twitter.key" value="<twitter key>"/>
|
|
<property name="keycloak.social.twitter.secret" value="<twitter secret>"/>
|
|
</system-properties>
|
|
|
|
Social provides implementations for Facebook, Google and Twitter.
|
|
|
|
|
|
Configure Facebook
|
|
------------------
|
|
|
|
Open https://developers.facebook.com/apps. Click on Create New App
|
|
|
|
Use any app name that you'd like, click Continue
|
|
|
|
Select Disabled for Sandbox Mode
|
|
|
|
Under Select how your app integrates with Facebook select Website with Facebook login. Fill in the form with the following values:
|
|
|
|
* Site URL: http://<HOSTNAME>[<PORT>]/auth-server/rest/social/callback
|
|
|
|
Click on Save changes. Use the value of App ID as the value of the system property "keycloak.social.facebook.key", and the value of App Secret as the value of "keycloak.social.facebook.secret".
|
|
|
|
|
|
Configure Google
|
|
----------------
|
|
|
|
Open https://code.google.com/apis/console/. From the drop-down menu select Create.
|
|
|
|
Use any name that you'd like, click Create Project, select API Access and click on Create an OAuth 2.0 client ID.
|
|
|
|
Use any product name you'd like and leave the other fields empty, then click Next. On the next page select Web application as the application type. Click more options next> to Your site or hostname. Fill in the form with the following values:
|
|
|
|
* Authorized Redirect URIs: http://<HOSTNAME>[<PORT>]/auth-server/rest/social/callback
|
|
|
|
Click on Create client ID. Use the value of Client ID as the value of the system property "keycloak.social.google.key", and the value of Client secret as the value of "keycloak.social.google.secret".
|
|
|
|
|
|
Configure Twitter
|
|
-----------------
|
|
|
|
Open https://dev.twitter.com/apps. Click on Create a new application.
|
|
|
|
Fill in name, description and website. Leave Callback URL empty!
|
|
|
|
Agree to the rules, fill in the captcha and click on Create your Twitter application.
|
|
|
|
Now click on Settings and tick the box Allow this application to be used to Sign in with Twitter, and click on Update this Twitter application's settings.
|
|
|
|
Finally click on Details. Use the value of Client key as the value of the system property "keycloak.social.twitter.key", and the value of Client secret as the value of "keycloak.social.twitter.secret".
|