12.3. Third-Party Client Authentication through RH-SSO

Procedure: Obtaining and Using Token for Authorizing Remote Calls

1. Click Client tab from the main admin console menu and click Create to create a new client.

   The Add Client page opens.

2. On the Add Client page, provide the required information to create a new client for your realm. For example:

   • Client ID: kie-remote
   • Client protocol: openid-connect

3. Click Save to save your changes.

   Once you create a new client, its access value public by default. Change it to confidential.

4. Obtain a token from Realm Settings:

   1. On the RH-SSO admin console, click Realm Settings tab.
   2. Click Tokens tab.

   3. Change the value for Access Token Lifespan to 15 minutes.

      This gives you enough time to obtain a token and invoke the service before it expires.

   4. Click Save to save your changes.

5. Once a public client for your remote clients is created, you can now obtain the token by making an HTTP request to the RH-SSO server’s token endpoint using:

   RESULT=`curl --data "grant_type=password&client_id=kie-remote&username=admin&password=password" http://localhost:8180/auth/realms/demo/protocol/openid-connect/token`

   Copy to Clipboard Toggle word wrap

6. To view the token obtained from the RH-SSO server, use the following command:

   TOKEN=`echo RESULT | sed 's/.*access_token":"//g' | sed 's/".*//g'`

   Copy to Clipboard Toggle word wrap