Chapter 4. Configuring authentication for the web console on Linux, Windows, or macOS

Procedure

1. Adjust the port number that the Red Hat SSO server opens to avoid conflicts with the port that the web console uses by entering the following:

   • For Linux and macOS:

     $ ./standalone.sh -Djboss.socket.binding.port-offset=<offset_value>

   • For Windows:

     > ...\bin\standalone.bat -Djboss.socket.binding.port-offset=<offset_value>

2. Open the Red Hat SSO administration console from http://localhost:8180:

   • Username: admin
   • Password: admin
3. Add a realm named mtr.
4. In the realm, create a client named mtr-web.
5. Check that Access Type is set to public.
6. Set Valid Redirect URIs to http://localhost:8080/windup-ui/*.
7. Set Web Origins to * and click Save.
8. Create a role named user.
9. Create a user with any name.
10. Set the credentials of the user, disable Temporary, and assign the role "user" to the user.

11. Switch the web console to Authentication required mode by doing the following:

    1. Export the following ENV variables:

       • For Linux and macOS:

         export SSO_AUTH_SERVER_URL=http://localhost:8180/auth
         export SSO_REALM=windup
         export SSO_SSL_REQUIRED=EXTERNAL
         export SSO_CLIENT_ID=windup-web

       • For Windows:

         set SSO_AUTH_SERVER_URL=http://localhost:8180/auth
         set SSO_REALM=windup
         set SSO_SSL_REQUIRED=EXTERNAL
         set SSO_CLIENT_ID=windup-web

         Note

         Environment variables that are set by the set command in CMD are local, available to the current CMD session only. Use the Windows Control Panel to permanently set the environment variables.

    2. Run the following script:

       • For Linux and macOS:

         $ <MTR_HOME>/switch_to_authentication_required.sh

       • For Windows:

         C:\<MTR_HOME>\switch_to_authentication_required.bat

12. Start the web console by entering the following:

    • For Linux and macOS:

      $ <MTR_HOME>/run_windup.sh

    • For Windows:

      C:\<MTR_HOME>\run_windup.bat

13. Open the browser at http://localhost:8080/windup-ui.

Procedure

1. Run the following script:

   • For Linux and macOS:

     $ <MTR_HOME>/switch_to_automatic_authentication.sh

   • For Windows:

     C:\<MTR_HOME>\switch_to_automatic_authentication.bat