Keycloak

Keycloak allows you to use identity federation in Yandex Cloud Organization.

Keycloak configuration is stored in Managed Service for PostgreSQL.

1. Create a service account and assign it the admin and organization-manager.admin roles for your folder and organization, respectively.

2. Create a cloud network without subnets.

3. Create a public DNS zone.

4. Get an SSH key pair to connect to a virtual machine.

5. In the management console, select Cloud Apps.

6. On the left-hand panel, select Marketplace.

7. Select Keycloak and click Use.

8. Specify the following:

   • Application name.
   • Application description (not required).
   • Service account you previously created.
   • ID of the organization to create a federation in.
   • ID of the cloud network you previously created.
   • CIDR of the subnet in the ru-central1-a availability zone. The subnet will be automatically created in the specified cloud network when installing the application.
   • ID and domain of the DNS zone you previously created.
   • Service name, e.g., keycloak.
   • Keycloak and database admin passwords.
   • Public SSH key to access the VM over SSH.

9. Click Install.

10. Wait for the application to change its status to Deployed.

    This may take from 10 to 15 minutes. After installing the app, you will see a new certificate in Yandex Certificate Manager, a VM named Keycloak in Yandex Compute Cloud, and a new federation in Yandex Cloud Organization.

11. Open http://<public_DNS_zone_domain>:8443/admin in your browser.

12. Use the following properties for authorization:

    • User name or email: admin
    • Password: Keycloak admin password specified when creating the application.

13. Add a keycloak user:

    1. In the left-hand panel, select Users.
    2. Click Add user and specify user data.
    3. Click Save.
    4. In the Credentials tab, click Set Password and enter a password.

14. Authenticate as keycloak using the federation link specified in Yandex Cloud Organization.

• Using identity federation in Yandex Cloud Organization.

Yandex Cloud technical support is available 24/7. The types of requests you can submit and the appropriate response time depend on your pricing plan. You can switch to the paid support plan in the management console. You can learn more about the technical support terms here.