Using Keycloak for SSO
Applications or services that request authentication from a user are called clients in Keycloak. Generally, clients are applications and services that want to use Keycloak as an SSO solution:
- Click Clients in the left menu, and then Create client:

Figure 9.20 – The Clients page
- Enter a unique Client ID value and click Next:

Figure 9.21 – The Create client page
- Click Save:

Figure 9.22 – The Create client capability page
After the client is created, it is not very useful unless it protects an application or service. Keycloak provides a test application at https://www.keycloak.org/app and we are going to use that application to test Keycloak.
- Enter https://www.keycloak.org/app/ in the Root URL field. Enter https://www.keycloak.org/ in the Valid redirect URIs field. Enter * in the Valid post logout redirect URIs field...