[ovirt-devel] Re: ovirt-engine external IDP (Keycloak) integration

If Keycloak/external auth is enabled we disable admin@internal and all internal profiles on engine side. I tested VM Portal and it seemed to work fine when external auth was enabled. On Thu, Nov 8, 2018 at 11:49 AM Michal Skrivanek wrote: > > > On 8 Nov 2018, at 16:53, Greg Sheremeta wrote: >

[ovirt-devel] Re: ovirt-engine external IDP (Keycloak) integration

> On 8 Nov 2018, at 16:53, Greg Sheremeta wrote: > > > > On Thu, Nov 8, 2018 at 9:25 AM Ravi Shankar Nori > wrote: > Hi All, > > Please find design document [1] for integrating ovirt-engine with Keycloak > using mod_auth_openidc. Engine can be configured to use ext

[ovirt-devel] Re: ovirt-engine external IDP (Keycloak) integration

On Thu, Nov 8, 2018 at 9:25 AM Ravi Shankar Nori wrote: > Hi All, > > Please find design document [1] for integrating ovirt-engine with Keycloak > using mod_auth_openidc. Engine can be configured to use external IDP to > handle user authentication while still supporting Rest API bearer > authenti