How to test MinIO SSO

1. Run keycloak:

git clone git@github.com:keycloak/keycloak-containers.git
cd keycloak-containers/server
git checkout 12.0.4
docker build -t jboss/keycloak:12.0.4 .
docker run --rm -p 9080:8080 -e KEYCLOAK_USER=admin -e KEYCLOAK_PASSWORD=admin jboss/keycloak:12.0.4

2. Access keycloak at http://localhost:9080

user: admin
password: admin

3. Follow steps and configure keycloak: https://github.com/minio/minio/blob/master/docs/sts/keycloak.md

4. Run MinIO:

MINIO_IDENTITY_OPENID_CLIENT_SECRET=9ca8236f-4f21-4356-9498-97c76d196c77 MINIO_ROOT_USER=minio MINIO_ROOT_PASSWORD=minio123 minio server /Volumes/data{1...4} --address :9000 --console-address :9001

5. Configure MinIO:

mc alias set myminio http://192.168.0.21:9000 minio minio123

mc admin config set myminio identity_openid config_url="http://localhost:9080/auth/realms/myrealm/.well-known/openid-configuration" client_id="account"

mc admin service restart myminio

6. Go to http://localhost:9001/login

7. Click Login with SSO:

8. Provide the credentials:

user: minio
password: minio123

9. It is expected that you can see Console UI: