TARDIS Project

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

[[meta:autogen:start|]]
===== Keycloak =====
^ Name | Keycloak |
^ Ports | 8443 (tcp) |
^  | [[https://netbox.tardisproject.uk/ipam/services/15/|View in NetBox.]] |
[[meta:autogen:end|]]

Provides [[https://www.onelogin.com/learn/how-single-sign-on-works|OpenID (Single Sign-On)]]. User information is federated from [[hosts:virtual_machines:enclave:ldap|LDAP]], and password authentication is done through [[hosts:virtual_machines:enclave:mit_kerberos_kdc|Kerberos]].

Because it misbehaves otherwise, this uses SSL with a certificate issued by [[hosts:virtual_machines:enclave:smallstep_ca|Step CA]].

===== Data directories =====

  * ''/var/lib/postgresql/''

===== Configuration locations =====

Handled declaratively through [[https://git.tardisproject.uk/tardis/nix/-/blob/main/profiles/keycloak/default.nix|Nix]].

Clients, Realms & Providers configured using the [[https://id.tardisproject.uk/admin|administration UI]].