Setting Up Two-Factor Authentication over the OIDC Protocol
Overview
SA Web supports additional authentication providers. In this configuration, Keycloak requests a second factor when a user signs in to Search Anywhere Framework, and data is exchanged through OpenID Connect (OIDC).
Setup Order
The stages are performed sequentially:
- Setting Up the Keycloak Provider — Keycloak installation and configuration of the database, certificate, realm, Active Directory federation, and OTP-based second factor
- Setting Up the Keycloak Client — creation of a client for SA Web and configuration of group transmission in the token
- Setting Up Search Anywhere Framework — configuration of the OIDC domain in the security settings and SA Web parameters
Setting Up the Keycloak Provider
Installing and configuring Keycloak as an additional authentication provider.
Setting Up the Keycloak Client
Configuring a client for the Keycloak provider.
Setting Up Search Anywhere Framework for Two-Factor Authentication over the OIDC Protocol
Configuring Search Anywhere Framework for two-factor authentication over the OIDC protocol