Skip to content
DromlikDocs
sv

Red Hat SSO integration

Last updated: 2026-07-01

Integrate Dromlik with Red Hat Single Sign-On (based on Keycloak) to let users sign in to the Dromlik App with the same account they use for the rest of your enterprise applications. Dromlik acts as an OpenID Connect (OIDC) client against a Red Hat SSO realm.

What the integration does

  • OIDC sign-in — users click "Sign in with Red Hat SSO" and get in without another password.
  • Just-in-time provisioning — the first time a user signs in through SSO, Dromlik can auto-create the extension using attributes from the SSO token.
  • Central sign-out — signing out of Red Hat SSO signs the user out of Dromlik.

Requirements

  • A running Red Hat SSO 7.x server (or upstream Keycloak) reachable from the Dromlik server.
  • A realm where your Dromlik users live (or are federated from LDAP/AD).
  • Realm administrator access.
  • Administrator access to Dromlik.

Set up the integration

  1. 1

    Create a client in Red Hat SSO

    In the Red Hat SSO admin console, select your realm and go to Clients → Create client. Set:

    • Client type: OpenID Connect
    • Client ID: dromlik
    • Client authentication: On
    • Valid redirect URIs: the redirect URI shown in Dromlik under Integrations → Red Hat SSO
  2. 2

    Copy the client secret

    On the client's Credentials tab, copy the client secret.

  3. 3

    Confirm the required scopes

    On Client scopes, make sure the client requests at least openid, profile and email.

  4. 4

    Connect Drömlik

    In Dromlik, go to Integrations → Red Hat SSO. Enter:

    • Issuer URL — e.g. https://sso.example.com/auth/realms/corp
    • Client ID — dromlik
    • Client secret — from the previous step

    Click Test connection, then Save.

  5. 5

    Map SSO claims to Drömlik fields

    Map the SSO token claims to Dromlik extension fields (email, given name, family name, mobile). Defaults follow the standard OIDC profile and email claims.

  6. 6

    Enable SSO on the sign-in screen

    Turn on Show "Sign in with Red Hat SSO" button. Optionally enable Just-in-time provisioning so a Dromlik extension is created automatically the first time a user signs in.

Troubleshooting

"invalid_redirect_uri" — the redirect URI in the Red Hat SSO client doesn't match the one Dromlik shows exactly.

"invalid_client" — the client ID or secret is wrong, or the client has Client authentication turned off.

Sign-in works but the extension isn't created — turn on Just-in-time provisioning, or pre-create the extension with a matching email address.