Citeck KeyCloak Extension

Note

Available only in Enterprise version.

KeyCloak extensions from Citeck: https://gitlab.citeck.ru/citeck-projects/ecos-keycloak-ext

Extension capabilities

  1. Creation or generation of Citeck events when Keycloak user and admin events occur (for example, when a user logs in or out).

  2. If the ECOS_KK_LISTEN_PERSON_DISABLED_STATUS flag is enabled, when a user is disabled in ecos-model, they are also disabled in Keycloak. Only works if there is no user synchronization from LDAP in KeyCloak.

When new users are created in KeyCloak, they are also created in Citeck.

Plugin connection

The plugin is connected by adding a volume to the Keycloak container:

volumes:
  - ./volumes/dir_with_jar_file:/opt/jboss/keycloak/standalone/deployments/ecos

The plugin can be downloaded from here

Plugin activation

The plugin can be activated in the Keycloak admin panel for the required realm:

ENV Configuration

ECOS_KK_RMQ_HOST=rabbitmq-dev - host for connecting to rabbitmq

ECOS_KK_RMQ_USERNAME=admin - user for connecting to rabbitmq

ECOS_KK_RMQ_PASSWORD=admin - password for connecting to rabbitmq

ECOS_KK_ZK_HOST=zookeeper-app - host for connecting to zookeeper

ECOS_KK_LISTEN_PERSON_DISABLED_STATUS={{EcosIdentityApp.ecosExtensions.listenPersonDisabledStatus}}

A Docker image has been created for delivery to stands:

ecos-keycloak-ext:
      image: nexus.citeck.ru/ecos-keycloak-ext:12.0.1.2
      container_name: ecos-keycloak-ext
      hostname: ecos-keycloak-ext
      environment:
              - KK_EXT_TARGET_ROOT=/run/extensions-target
      volumes:
              - ./kk-ecos-extensions:/run/extensions-target

KK_EXT_TARGET_ROOT - directory where the extension JAR file needs to be copied.