Keycloak - Create Users/Roles in Realm (2024)

In previous tutorial we have installed the Keycloak. In this tutorial, we'll demonstrate how to create realm, client, users, roles and will map the user to the roles.

Q: What is Realm in Keycloak?

Realm is a central place to have users their credentials and rules.

Q: What is Client in Keycloak?

To connect to Keycloak from a Spring Boot application, each Spring Boot application must have a Client created in Keycloak. Client contains client ID and client secret to use with Spring Boot application.

Follow below steps to create Realm, Client, Users, Role and their mappings in the Keycloak.

Create Realm

1. Access the keycloak from http://localhost:9090/auth and provide any username and password.

2. Click on Administration Console.

3. Provide same username and password as provided above.

4. Once we've successfully logged in, we'll see the screen below.

5. Roll over the mouse on Master dropdown to see Add Realm button. Click on the Add Realm.

6. Provide the project name or organization name and click on create.

Create Client

Each Spring Boot application will require client.

1. Click on Clients -> Create.

2. Create Client.

3. Once click on Save, it'll navigate to Setting. Select Access Type -> Confidential.
4. Download and start the project for Spring Boot Keycloak SSO Example. So that we can provide the the valid url of the project in Keycloak.
5. Provide Valid Redirect URIs -> http://localhost:8080/* and click on Save.

6. Go to Credential tab. This credential will be needed in our spring boot application to connect with Keycloak.

Create Users

1. Click on Users -> Add User. Provide username and click on save.
2. Once user is created, click on Credentials tab.
   • Provide Password.
   • Turn ON the temporary Password and click on Set Password.
   • It means that the first time a user signs in, it will prompt them to reset their temporary password and enter their own.
   • If you turn it off, the user will be unable to change their password for the first time they sign in.
   • We have created two users.

Create Roles

1. Click on Roles -> Add role -> Provide Role Name.
2. We have created two roles as ADMIN and USER.

Assign Roles to users

1. Go to Users -> click on user -> Role Mappings -> Assign the specific role.
2. You will see the roles has been assigned to the users.

3. You can also see assigned roles from Roles -> Click on Role Name -> Users in Role tab.