Keycloak Configuration

Follow these steps to enable Keycloak integration with Cartography.

1. Create your client in Keycloak

   1. Log into the Keycloak admin console

   2. Inside the master realm, create a new client:

      • Under General settings, set the client type to OpenID Connect

      • In the Capability config section, enable only Client authentication, and check only Service account roles

   3. Go to the Credentials tab of your client and copy the client secret

   4. Store the client secret in an environment variable. You’ll need to pass the variable name to Cartography using the --keycloak-client-secret-env-var CLI flag

   5. Provide the client ID using the --keycloak-client-id parameter

2. Set the base URL of your Keycloak instance with the --keycloak-url parameter

3. If you created your client in a realm other than master, specify it using the --keycloak-realm parameter