第5章 Authenticating Decision Server through RH-SSO
Decision Server provides a REST API for third-party clients. If you integrate Decision Server with RH-SSO, you can delegate third-party client identity management to the RH-SSO server.
After you create a realm client for Red Hat Decision Manager and set up the RH-SSO client adapter for Red Hat JBoss EAP, you can set up RH-SSO authentication for Decision Server.
Prerequisites
- RH-SSO is installed as described in 2章Installing and configuring RH-SSO.
-
At lease one user with the
kie-serverrole has been added to RH-SSO as described in 3章Adding Red Hat Decision Manager users. - Decision Server is installed in a Red Hat JBoss EAP 7.2 instance, as described in Installing and configuring Red Hat Decision Manager on Red Hat JBoss EAP 7.2.
This chapter contains the following sections:
5.1. Creating the Decision Server client on RH-SSO リンクのコピーリンクがクリップボードにコピーされました!
Use the RH-SSO Admin Console to create a Decision Server client in an exiting realm.
Prerequisites
- Decision Server is installed in a Red Hat JBoss EAP 7.2 server, as described in Installing and configuring Red Hat Decision Manager on Red Hat JBoss EAP 7.2.
- RH-SSO is installed as described in 2章Installing and configuring RH-SSO.
-
At lease one user with the
kie-serverrole has been added to RH-SSO as described in 3章Adding Red Hat Decision Manager users.
Procedure
- In the RH-SSO Admin Console, open the security realm that you created in 2章Installing and configuring RH-SSO.
Click Clients and click Create.
The Add Client page opens.
On the Add Client page, provide the required information to create a Decision Server client for your realm, then click Save. For example:
- Client ID: kie-execution-server
- Root URL: \http://localhost:8080/kie-server
- Client protocol: openid-connect
-
The new client Access Type is set to
publicby default. Change it toconfidentialand click Save again. -
Navigate to the Credentials tab and copy the secret key. The secret key is required to configure the
kie-execution-serverclient.