Red Hat Single Sign On Walkthrough

Description

This demo showcase a step-by-step guide covering basic capabilities from Red Hat Single Sign ON.

Building from Source

Source code artifacts are available in source directory. No need to build/compile anything since we're using JavaScript and HTML.

Docker assets are available in docker directory. In order to modify those images, just change Dockerfile-js-console or Dockerfile-rhsso-73 files as needed and execute docker build -t from root directory . Example:

docker build -t rhsso-js-console-app:1.0 -f docker/Dockerfile-js-console .
docker build -t rhsso74:1.0 -f docker/Dockerfile-rhsso-74 .

Demo Script

1. Starting RHSSO and JS Console App
2. Create RHSSO Realm
3. Create RHSSO Client APP
4. Create RHSSO Roles
5. Create RHSSO User
6. Enable SignUp
7. Change Themes
8. User Required Actions
9. Social Login
10. Two Factor with OTP
11. End User Account Management

1. Starting RHSSO and JS Console App

• Execute docker pull to download both Red Hat Single Sign ON and JS Console App:

  docker pull viniciusmartinez/rhsso74:1.0
  docker pull viniciusmartinez/sso-console-app:1.0
  

• Bootstrap both Red Hat Single Sign ON and JS Console App:

  docker run -it -p 8080:8080 viniciusmartinez/rhsso73:1.0
  docker run -it -p 80:80 viniciusmartinez/sso-console-app:1.0
  

  • if you modify Red Hat Single Sign ON default port don't forget to update keycloak.json;

• Open a browser of your choice and try to access Red Hat Single Sign ON on the following address with admin/admin credentials: http://localhost:8080/auth

• Open a new tab and try to access JS Console App on the following address: http://localhost:80

2. Create RHSSO Realm

• Return to the Red Hat Single Sign ON browser tab and place the mouser on the left top corner, right above the Master. Click on the arrow button and select Add Realm;
• In the name textfield use: demo;
• Click on Create;

3. Create RHSSO Client APP

• Click on Clients right bellow the Realm Settings at the left menu;
• Click on Create button on the right corner;
• On the Client ID textfield, use: js-console;
• Inform the Root URL: http://localhost
• Click on Save button;

4. Create RHSSO Roles

• Click on Roles right bellow the Client Templates at the left menu;
• Click on Add Role button;
• Inform a Role Name (e.g: realm-role) and click on Save button afterward;
• Click on Clients right bellow the Realm Settings at the left menu;
• Select js-console and Roles afterward;
• Click on Add Role button;
• Inform a Role Name (e.g: client-role) and afterwards Save button;
• Click on Roles again;
• Select Default Roles;
• Select any role available Available Roles list and click on Add Selected;
• In the Client Roles select js-console and click on Add Selected;

5. Create RHSSO User

• Click on Users right bellow the Groups at the left menu;
• Click on Add User button;
• Inform a Username and click on Save button;
• Got to Credentials tab and inform a new password;
• Change Temporary to OFF;
• Finally click on Reset Password;
• Switch back to JS Console App (http://localhost:80) and click on Login
• The Red Hat Single Sign ON login page will be displayed. Inform the credentials from the user you've created on previous step;
• If everything is properly configured, after a successfully login you will be redirected to the JS Console App. Please notice the Init Success (Authenticated) right below the Result label;
  • considering exploring all buttons (Get Profile, Get User Info, Show Token) to familiarize yourself with OpenID/OAuth standards;

6. Enable SignUp

• Go back to JS Console App (http://localhost:80) and click on Logout
• Switch back to Red Hat Single Sign ON (http://localhost:8080) and click on Realm Settings right bellow the Realm Name (Demo) and select Login;
• Enable User Registration
• Click on Save
• On JS Console App (http://localhost:80) click on Login button;
• Click on Register and create a new user informing all required fields;
• • if you experience session issues with other users, considering open a new browser instance or an incognito tab;

7. Change Themes

• Go to JS Console App (http://localhost:80) and click on Logout;
• On Red Hat Single Sign ON (http://localhost:8080), click Realm Settings and select Themes tab;
• Select a different theme from Login Theme dropdown list;
• Click on Save;
• Go back to JS Console App (http://localhost:80) and click on Login;
• Notice a different look'n'feel from Red Hat Single Sign ON login page;

8. User Required Actions

• Click on Users right bellow the Groups at the left menu;
• Click on View all users button and select one;
• Select an user by clicking on Edit;
• Select a few actions on Required User Actions menu;
• Click on Save
• Try to login with this user and now you'll have to execute the Required Actions previously configured;

9. Social Login

• Go to JS Console App (http://localhost:80) and click on Logout;
• On Red Hat Single Sign ON (http://localhost:8080), click on Identity Providers right bellow the Roles at the left menu;
• Select Github;
• Open a new tab and access your Github account.
  • • Select Settings -> Developer Settings -> OAuth App and finally click on: New OAuth App
• Inform an Application name and a Homepage URL and finally copy the Redirect URI from Red Hat Single Sign ON and paste it on CallBack URL
• Click on Register Application
• Copy both Client ID and Client Secret from Github and paste them on RHSSO
• Click on Save
• Go back to JS Console App (http://localhost:80) and click on Login;
• Notice that now you have the option to login with Github;

10. Two Factor with OTP

• On JS Console App (http://localhost:80) click on Logout;
• On Red Hat Single Sign ON (http://localhost:8080) click on Authentication right bellow the User Federation at the left menu;
• Change the default OTP FORM from OPTIONAL to REQUIRED;
• Go back to JS Console App (http://localhost:80) and click on Login;
• • considering installing FreeOTP or Google Authenticator and configure the authentication by scanning the provided QR Code;

11. End User Account Management

• Open a new browser tab with the following url: http://localhost:8080/auth/realms/demo/account
• Navigate through the options and update your profile if desired;

Additional References