Keycloak Integration

[tobiasschaefer]

Does the Camunda Keycloak integration work?

see https://github.com/camunda/camunda-bpm-identity-keycloak

Todo

• Test it
• Document (if not covered by Support ProcessEngine Plugins #143) or extend the existing documentation

[martisaw]

What I tested:
I created a keycloak user that I used to

• log into the Webapps
• get responses from the rest api with basic-auth enabled

Working example:
Check out this branch https://github.com/martisaw/micronaut-camunda-bpm/tree/keycloak

Instruction

1. Start keycloak docker run -p 8080:8080 -e KEYCLOAK_USER=admin -e KEYCLOAK_PASSWORD=admin -e DB_VENDOR="h2" quay.io/keycloak/keycloak:12.0.4. Follow the installation instructions here. Add a test user.

I had some problems with Docker. You need to provide the -e DB_VENDOR="h2". Otherwise it does not start.

2. Add the dependecy implementation("org.camunda.bpm.extension:camunda-bpm-identity-keycloak:2.0.0")
3. Add plugin code (covered by Support ProcessEngine Plugins #143 and the instructions of the plugin)

@Singleton
@ConfigurationProperties("plugin.identity.keycloak")
public class KeyCloakPlugin extends KeycloakIdentityProviderPlugin {}

4. Configure the application.yml

plugin.identity.keycloak:
  keycloakIssuerUrl: http://localhost:8080/auth/realms/master
  keycloakAdminUrl: http://localhost:8080/auth/admin/realms/master
  clientId: camunda-identity-service
  clientSecret: # you get this from keycloak
  useEmailAsCamundaUserId: true
  administratorGroupName: camunda-admin

5. Start the application and log in with your created test user. Bear in mind that your user needs an e-mail address.

[tobiasschaefer]

Thanks @martisaw for the documentation in this issue and the example - I'm closing this issue now.

If there is enough demand we might document this somewhere but for now this should be sufficient since the keycloak integration behaves like any other plugin which is already documented.

[tobiasschaefer]

@raghung: If I'm not mistaken you asked in the webinar in February 2021 if the Camunda Micronaut Integration supports Keycloak.

In the webinar we said it should work - now we can confirm it does :-) See details in this issue.

[raghung]

Thanks @tobiasschaefer, it helps. I am planning to migrate current Springboot app to Micronaut🙂

[tobiasschaefer]

Hi @raghung ,

wow - good to hear that our integration works for you :-)

As an open source project we're not aware of all installations. However, we'd love to hear your feedback. And of course we would also like to discuss what you are using the Micronaut Camunda Integration for to prioritise the next steps. I'm curious what you are using it for.

Are you interested in an exchange via mail or online meeting? I'd be happy if you contact me at tobias.schaefer@novatec-gmbh.de