From b8d737a914689978a2cfef776c0ce03fa5a41f4e Mon Sep 17 00:00:00 2001 From: Ralf Haferkamp Date: Mon, 1 Nov 2021 12:50:48 +0100 Subject: [PATCH] docs: Add note about OIDC discovery redirect for Keycloak Using an external OIDC IDP means that, that IDP also needs to serve the OIDC discovery information. Fixes: https://github.com/owncloud/ocis/issues/2676 --- docs/ocis/deployment/ocis_keycloak.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/ocis/deployment/ocis_keycloak.md b/docs/ocis/deployment/ocis_keycloak.md index 300b725e81..727e79268d 100644 --- a/docs/ocis/deployment/ocis_keycloak.md +++ b/docs/ocis/deployment/ocis_keycloak.md @@ -17,7 +17,8 @@ geekdocFilePath: ocis_keycloak.md [Find this example on GitHub](https://github.com/owncloud/ocis/tree/master/deployments/examples/ocis_keycloak) -The docker stack consists 4 containers. One of them is Traefik, a proxy which is terminating ssl and forwards the requests to oCIS in the internal docker network. +The docker stack consists 4 containers. One of them is Traefik, a proxy which is terminating ssl and forwards the requests to oCIS in the internal docker network. It +is also responsible for redirecting requests on the OIDC discovery endpoints (e.g. `.well-known/openid-configuration`) to the correct destination in Keycloak. Keycloak add two containers: Keycloak itself and a PostgreSQL as database. Keycloak will be configured as oCIS' IDP instead of the internal IDP [LibreGraph Connect]({{< ref "../../extensions/idp" >}})