Chapter 2. Configuring Red Hat Single Sign-On for OpenShift

Procedure

1. List the available Red Hat Single Sign-On application templates:

   $ oc get templates -n openshift -o name | grep -o 'sso75.\+'
   sso75-https
   sso75-postgresql
   sso75-postgresql-persistent
   sso75-x509-https
   sso75-x509-postgresql-persistent

   Copy to Clipboard Toggle word wrap

2. Deploy the selected one:

   $ oc new-app --template=sso75-x509-https
   --> Deploying template "openshift/sso75-x509-https" to project sso-app-demo
   
        Red Hat Single Sign-On 7.5 (Ephemeral)
        ---------
        An example Red Hat Single Sign-On 7 application. For more information about using this template, see <link xlink:href="https://github.com/jboss-openshift/application-templates">https://github.com/jboss-openshift/application-templates</link>.
   
        A new Red Hat Single Sign-On service has been created in your project. The admin username/password for accessing the master realm using the Red Hat Single Sign-On console is IACfQO8v/nR7llVSVb4Dye3TNRbXoXhRpAKTmiCRc. The HTTPS keystore used for serving secure content, the JGroups keystore used for securing JGroups communications, and server truststore used for securing Red Hat Single Sign-On requests were automatically created using OpenShift's service serving x509 certificate secrets.
   
        * With parameters:
           * Application Name=sso
           * JGroups Cluster Password=jg0Rssom0gmHBnooDF3Ww7V4Mu5RymmB # generated
           * Datasource Minimum Pool Size=
           * Datasource Maximum Pool Size=
           * Datasource Transaction Isolation=
           * ImageStream Namespace=openshift
           * Red Hat Single Sign-On Administrator Username=IACfQO8v # generated
           * Red Hat Single Sign-On Administrator Password=nR7llVSVb4Dye3TNRbXoXhRpAKTmiCRc # generated
           * Red Hat Single Sign-On Realm=
           * Red Hat Single Sign-On Service Username=
           * Red Hat Single Sign-On Service Password=
           * Container Memory Limit=1Gi
   
   --> Creating resources ...
       service "sso" created
       service "secure-sso" created
       service "sso-ping" created
       route "sso" created
       route "secure-sso" created
       deploymentconfig "sso" created
   --> Success
       Run 'oc status' to view your app.

   Copy to Clipboard Toggle word wrap

Procedure

1. Log in to the OpenShift web console and select the sso-app-demo project space.
2. Click Add to Project, then Browse Catalog to list the default image streams and templates.
3. Use the Filter by Keyword search bar to limit the list to those that match sso. You may need to click Middleware, then Integration to show the desired application template.
4. Select an Red Hat Single Sign-On application template. This example uses Red Hat Single Sign-On 7.5 (Ephemeral).
5. Click Next in the Information step.
6. From the Add to Project drop-down menu, select the sso-app-demo project space. Then click Next.
7. Select Do not bind at this time radio button in the Binding step. Click Create to continue.
8. In the Results step, click the Continue to the project overview link to verify the status of the deployment.

Procedure

1. Log in to the OpenShift web console and select the sso-app-demo project space.

2. On the left sidebar, click the Administrator tab and then click </> Developer.

   

3. Click From Catalog.

   

4. Search for sso.

   

5. Choose a template such as Red Hat Single Sign-On 7.5 on OpenJDK (Ephemeral).

   

6. Click Instantiate Template.

   

7. Adjust the template parameters if necessary and click Create.

8. Verify the Red Hat Single Sign-On for OpenShift image was deployed.