Keycloak not working with alfresco 25.2

[Ghanshyam_R]

Team,

We are using identity-service 1.8 (keycloak) for SSO with alfresco 7.3 til now.
Now we upgrading it to alfresco 25.2, we are facing issue with authentication now, with alfresco 25.2
users are not syncing from keycloak to alfresco, I mean what all changes are required we are totally not aware.

Points
#1. Do we need to upgrade keycloak as well? latest is 26.x [ if yes, what all configuration need to do here? ]
#2. If we can utilize same keycloak , what changes we need to do for alfresco 25.x compatibility?
#3. I see users are there in keycloak but fresh instance not showing users, how do I get similar users created in alfresco as well? what config needed?

Kindly provide your inputs here.

[LeoMattioli]

Hi,

FYI, Keycloak is used for authentication only, not for user synchronization or authorization. Alfresco uses Keycloak simply to receive a username; then Alfresco checks whether that username exists in its database and what permissions it has. (see also this doc)

If the user is not already present in the Alfresco database, they will not be recognized. This is why Alfresco is usually synchronized with an external LDAP to import users’ names and related data (link to configuration docs).

Hope this helps.

[angelborroy]

Hope this helps:

https://github.com/aborroy/alfresco-identity-service-to-keycloak