This document illustrates how to setup Keycloak for AAI multi-tenancy support.

Prerequisites

• A Keycloak instance running with administrative credentials
• AAI application (aai-resource or aai-traversal) running and can reach the Keycloak instance
• AAI application should be running with the "keycloak" as one of the active spring profiles

ie:  Check values.yaml to see if "keycloak" is included in the profile.active config

    # Active spring profiles for the resources microservice
    profiles:
      active: production, dmaap, aaf-auth, keycloak

Setting up Keycloak's realm, users and roles

1. Create a new realm
2. Create a client
3. Create a client role
4. Create a realm role
5. Create a user

Running test suites

The test suites has the following sequences