Attention: The Keycloak upgrade has been completed. As this was a major upgrade, there may be some unexpected issues occurring. Please report any issues you find to support by using the contact form found at https://www.ebrains.eu/contact/. Thank you for your patience and understanding. 


Use your OIDC client as service account

Version 1.1 by messines on 2020/12/04 11:25

Abstract

With IAM, you have the possibility to log in useing your client_id and your secret to generate an access token.

This can be partiuculary usefull in a tier application, you can use your_client to log in into your app but also then to reach our Drive and Collab API.

Configure your OIDC Client

First thing to do is to configure your OIDC client as a Service account. You juste have to provide "serviceAccountsEnabled" : true in the définition of your client. Please have a look to this documentation know how to modify your oidc client.

{{code language="json"}}
{
   "defaultClientScopes" : [
      "web-origins",
      "roles"
   ],
   "redirectUris" : [
      "/relative/redirect/path",
      "/these/can/use/wildcards/*"
   ],
   ...,

   ...,
   "serviceAccountsEnabled" : true
}
{{/code}}