OpenSRP uses Oauth2 to support single sign on.
...
| No Format |
|---|
#Make sure to activate the oauth2 profileopensrpprofile opensrp_maven_package_profiles: - postgres - jedis - oauth2 opensrp_oauth_profiles: default: client_id: "opensrp-trusted-client" secret: "O@aTHS#cr3t" grant_types: - password - authorization_code - refresh_token - implicit scope: - read - write - trust token_validity: 3600 callback_url: "" roles: - ROLE_CLIENT androidclient: client_id: "android-apps-client" secret: "Dr01dS#cr3t" grant_types: - password - refresh_token scope: - read - write - trust token_validity: 3600 callback_url: "" roles: - ROLE_CLIENT |
2. Keycloak
When using keycloak, OpenSRP has only the resource server, keycloak acts as the authentication server. To configure Keycloak refer to this documentation
When configuring OpenSRP to use keycloak via playbooks define the below variables on your inventories for the OpenSRP group vars
...