Set up clients
Default clients
In the WorkFusion-integrated Keycloak implementation, clients are the following WorkFusion applications—Control Tower, WorkSpace, and Kibana. They are available in Keycloak by default under the names—wf-control-tower, wf-workspace, wf-kibana.
Additionally, Keycloack features the default realm-management client for managing permissions to access and modify Keycloak settings.
To view available clients, select Clients on the left menu. The client list becomes visible on the right.
Client settings
The settings of the default clients are preconfigured for you. To view the settings, find a client on the client list, and click its Client ID or Edit next to it. This brings you to the client's settings page.
It is not recommended to change the settings, but for the few exceptions on the Settings tab:
You can enable or disable a client by turning on or off the Enabled toggle.
If you move the WorkFusion applications to another host, you may need to modify the Root URL and the Valid Redirect URIs settings.
To add a redirect URI pattern (port), specify it in the respective field and click the + sign. To delete an invalid pattern, click the - sign next to it.
note
If you change any of the above settings, do not forget to click Save to save the changes.
Client scopes
Client scopes enable mapping Keycloak users to clients, together with user-associated roles and protocol mappers.
In the WorkFusion-integrated Keycloak implementation, client scopes are preconfigured for you. It is not recommended to change them.
To view the available client scopes, select Client Scopes on the left menu. The list of preconfigured client scopes appears on the right.
To view the settings of a client scope, find the required scope on the list and click its name or Edit next to it.