OpenManage Enterprise 4.0.x User's Guide

Configure OIDC login using Keycloak

To enable OpenManage Enterprise OpenID Connect (OIDC) login using Keycloak, add and map dxcua to the Client ID. Define the user privileges as follows:

1. In the Attributes section of Keycloak Users, define the 'Key and Value' for OpenManage Enterprise login roles using one of the following attributes:
   • Administrator : dxcua : [{"Role": "AD"}]
   • Device Manager: dxcua : [{"Role": "DM"}]
     NOTE: To restrict access of the device manager to select device groups, say G1 and G2, on the appliance use dxcua : [{“Role": "DM", "Entity":"G1, G2"}].
   • Viewer: dxcua : [{"Role": "VE"}]
2. Once the client is registered in Keycloak, in the Mappers section, add a "User Attribute" mapper type with the below values:
   • Name: dxcua
   • Mapper Type: User Attribute
   • User Attribute: dxcua
   • Token Claim Name: dxcua
   • Claim JSON Type: String
   • Add to ID Token: Enable
   • Add to access Token: Enable
   • Add to user info: Enable