Chapter 1. Installing a sample instance of Red Hat Single Sign-On
This section describes how to install and start a Red Hat Single Sign-On server in standalone mode, set up the initial admin user, and log in to the Red Hat Single Sign-On Admin Console.
Additional Resources
This installation is intended for practice use of Red Hat Single Sign-On. For instructions on installation in a production environment and full details on all product features, see the other guides in the Red Hat Single Sign-On documentation.
1.1. Installing the Red Hat Single Sign-On server
For this sample instance of Red Hat Single Sign-On, this procedure involves installation in standalone mode. The server download ZIP file contains the scripts and binaries to run the Red Hat Single Sign-On server. You can install the server on Linux or Windows.
Procedure
- Go to the Red Hat customer portal.
- Download the Red Hat Single Sign-On Server: rh-sso-7.6.zip
- Place the file in a directory you choose.
Unpack the ZIP file using the appropriate
unziputility, such as unzip, tar, or Expand-Archive.Linux/Unix
$ unzip rhsso-7.6.zip or $ tar -xvzf rh-sso-7.6.tar.gz
Windows
> Expand-Archive -Path 'C:Downloads\rhsso-7.6.zip' -DestinationPath 'C:\Downloads'
- Return to the Red Hat customer portal.
-
Click the
Patchestab. Download the Red Hat Single Sign-On 7.6.11 server patch.
Place the downloaded ZIP file in a directory you choose.
- Go to the root directory of the Red Hat Single Sign-On server.
Start the JBoss EAP command line interface.
Linux/Unix
$ ./bin/jboss-cli.sh
Windows
> .\bin\jboss-cli.bat
Apply the patch.
$ patch apply <path-to-zip>/rh-sso-7.6.11-patch.zip
1.2. Enable Java 17 for Red Hat Single Sign-On
If Java SE 17 wants to be used to run Red Hat Single Sign-On an extra step is neeeded. The bundled enable-elytron-se17.cli script file should be run to prepare the server. If a previous version of Java is used this step is not necessary.
Prerequisites
- You saw no errors during the Red Hat Single Sign-On server installation.
Procedure
- Go to the root directory of the Red Hat Single Sign-On server.
Run the
jboss-clicommand passing theenable-elytron-se17.cliscript.Linux/Unix
$ ./bin/jboss-cli.sh --file=docs/examples/enable-elytron-se17.cli
Windows
> .\bin\jboss-cli.bat --file=docs\examples\enable-elytron-se17.cli
1.3. Starting the Red Hat Single Sign-On server
You start the server on the system where you installed it.
Prerequisites
- You saw no errors during the Red Hat Single Sign-On server installation.
Procedure
-
Go to the
bindirectory of the server distribution. Run the
standaloneboot script.Linux/Unix
$ cd bin $ ./standalone.sh
Windows
> ...\bin\standalone.bat
1.4. Creating the admin account
Before you can use Red Hat Single Sign-On, you need to create an admin account which you use to log in to the Red Hat Single Sign-On admin console.
Prerequisites
- You saw no errors when you started the Red Hat Single Sign-On server.
Procedure
Open http://localhost:8080/auth in your web browser.
The welcome page opens, confirming that the server is running.
Welcome page
- Enter a username and password to create an initial admin user.
1.5. Logging into the admin console
After you create the initial admin account, you can log in to the admin console. In this console, you add users and register applications to be secured by Red Hat Single Sign-On.
Prerequisites
- You have an admin account for the admin console.
Procedure
Click the Administration Console link on the Welcome page or go directly to http://localhost:8080/auth/admin/ (the console URL).
NoteThe Administration Console is generally referred to as the admin console for short in Red Hat Single Sign-On documentation.
Enter the username and password you created on the Welcome page to open the admin console.
Admin console login screen
The initial screen for the admin console appears.
Admin console
Next steps
Now that you can log into the admin console, you can begin creating realms where administrators can create users and give them access to applications. For more details, see Creating a realm and a user.
