Page Comparison

Create a custom scope

1. Open the Keycloak administration console

2. Open the “Client Scopes” tab

3. Click “Create”

4. Enter the following information:

   1. Name: modelop_client

   2. Description: A ModelOp custom scope used to distinguish between an OAuth2 client and an end-user

   3. Protocol: openid-connect

   4. Display On Consent Screen: OFF

   5. Include in Token Scope: ON

   6. GUI order:

5. Click “Save”

...

1. Open the Keycloak administration console

2. Open the “User Federation” tab

3. Select the LDAP provider

4. Open the “Mappers” tab

5. Click “Create”

6. Enter the following information:

   1. Name: modelOpGroups

   2. Mapper Type: hardcoded-attribute-mapper

   3. User Model Attribute Name: memberOf

   4. Attribute Value: modelop

7. Click “Save”

Official Keycloak Resources

The following links from the official Keycloak documentation are excellent resources that cover the topics and settings required for ModelOp Center:

• Core concepts and terms

• Creating a realm

• LDAP provider

• LDAP mappers

• Client scopes

• Creating an OpenID Connect client