3.3.1 Installing and Starting Keycloak

To install and configure Keycloak, see the Getting Started Guide

Note:

• By default, TSAM domain validates the hostname during the TLS handshake. Therefore, when HTTPS is used, the certificate used by Keycloak must include the appropriate Subject Alternative Names (SANs) that match the hostname being accessed.
• If a self-signed certificate is used, its CA certificate must be imported into the WebLogic Server (WLS) truststore so that the certificate chain can be validated successfully.

After installation, you need to verify the following:

• Keycloak is running
• You can access the Keycloak Admin Console
• You can log in using an administrative user
  Example admin console URL:

  http://<keycloak-host>:<port>/admin
          
  

  (or)

  https://<keycloak-host>:<port>/admin