The SphereLink Theme uses Keycloak. Out of the box, the UI provided by Keycloak is quite different from the rest of SphereLink. But Keycloak allows a customer to provide alternative themes to replace the default Keycloak themes. We use this mechanism to provide an SphereLink theme.
The following themes can be replaced.
- login
- account
- admin
This projects contains a theme that can be used to replace the login theme to provide an experience that is consistent with SphereLink.
Several approaches are possible.
- Extend the existing themes. With this approach, a copy of the default theme is made and selective edits are made to the theme. For example, different style sheets can be used but otherwise the layout provide by Keycloak could stay the same.
- Use ADF. With this approach, the ADF component is used directly, effectively making Keycloak an ADF app.
- Custom login page. With this approach, a page is provided that uses the same approved VerlaineSSO styles.
This project currently uses the approach of a custom login page (option #3).
Since Keycloak supports Freemarker, a template file is provided along with css styles and images like those documented to look like the approved designs
The project also includes improvements to the translated messages for the languages supported by Alfresco.
- After installing Keycloak, navigate to the themes directory as in e.g.
C:\keycloak\themes
- Create a directory named SphereLink.
- Copy the login directory from this project to a login directory in the SphereLink theme directory you just created
- Start Keycloak
- Find the name of the pod in which the cluster is running
kubectl get pods
... erstwhile-rabbit-key-0 1/1 Running 1 20h
- Git clone this repository
- Use the kubectl command to copy the login directory from the cloned project to the pod running Keycloak. In the example below,the name of the Kubernetes namespace is default and the name of the pod is erstwhile-rabbit-key-0
# create SphereLink theme directory
kubectl exec erstwhile-rabbit-key-0 --namespace default -- mkdir /opt/jboss/keycloak/themes/SphereLink
# copy theme files to the pod
kubectl cp ~/IdeaProjects/SphereLink-theme/theme/login default/erstwhile-rabbit-key-0:/opt/jboss/keycloak/themes/SphereLink
NOTE: These instructions assume you are using a Keycloak realm named SphereLink such as is created by the Alfresco DBP Deployment. But you can also apply the theme to the default realm or some other realm.
- Navigate to the admin console for the realm as in e.g.
https://spherelink.fr/auth/admin/master/console/#/realms/prod
- Choose the SphereLink theme as illustrated. Click Save.
- Login to a page in the VerlaineSSO realm that requires authentication (e.g. https://sso.ac-verlaine.net/auth/realms/prod/account) and you should see a form like this.
The Identity Service also supports the use of SAML Identity Providers. If you use the Keycloak Admin Console to configure one or more such providers you will see a button for each of the providers, as illustrated here. Clicking on one of the buttons will redirect the browser to the authentication page configured for that provider.
If you want to learn more about how to customize Keycloak themes, go here.