oclsso

OCL SSO configuration and implementation

Realm Settings:

Login:
- User registration: on
- Forgot Password: on
- Verify email: on
- Login with email: on
Email:
- SMTP settings for sending out mails from KeyCloak for verify-email/forgot-password.
Tokens:
- Access Token Lifespan as per needed

Client Settings:

Settings:
- Access Type: confidential
- Standard Flow Enabled: on
- Implicit Flow Enabled: on
- Direct Access Grants Enabled: on
- Valid Redirect URIs: Client URIs, for example -- https://api.dev.openconceptlab.org/* and https://app.dev.openconceptlab.org/*
- Web Origins: TermBrowser URI -- http://app.dev.openconceptlab.org/*
- Authentication Flow Overrides:
  - Browser Flow: browser
  - Driect Grant Flow: direct grant
Credentials:
- Client Authenticator: Client Id and Secret
Scope:
- Full Scope Allowed: on