> For the complete documentation index, see [llms.txt](https://docs.logilica.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.logilica.com/sso-integration/keycloak-sso.md).

# Keycloak SSO

Keycloak is an Identity Management service that implements an Identity Provider (IdP),\
using protocols such as SAML. Logilica's SSO supports Keycloak's SAML SSO.

To enable Keycloak SAML SSO with Logilica, please complete the following:

1. **Match Client ID and Entity ID**\
   In the Logilica SSO configuration, ensure the **Entity ID** field has the same value as Keycloak's **Client ID**. The client type should be **SAML.**

<figure><img src="/files/JzyD4Rz4VqnbqKatNBiC" alt="" width="563"><figcaption><p><em>Keycloak Realm Client settings</em></p></figcaption></figure>

<figure><img src="/files/pNdotbsbr1qrcJOMJaKf" alt="" width="563"><figcaption><p><em>Logilica Organisation Single Sign On settings</em></p></figcaption></figure>

2. **Set Valid Redirect URIs**\
   In Keycloak, navigate to the Client's **Settings** page.\
   Under **Access Settings**, for **Valid Redirect URIs**, please add '<https://logilica.io/\\>\*'. \\

   <div data-full-width="true"><figure><img src="/files/ZSmsrdTcAjKCYZFXaUUh" alt="" width="563"><figcaption><p><em>Keycloak Client Access settings</em></p></figcaption></figure></div>
3. **Turn off Signing Keys**\
   From the Client's settings page, select the **Keys** tab.\
   In the **Signing Keys** **Configuration,** turn off **Client signature required**.

<figure><img src="/files/Pr6aGkU0j12tBwAm0bbT" alt="" width="563"><figcaption><p><em>Keycloak Client Keys settings</em></p></figcaption></figure>

4. **Fill in Entry URL and Certificate fields**\
   The **Entry URL** and **Certificate** field can be obtained from the Realm's **SAML 2.0 Identity Provider Metadata** document.

<figure><img src="/files/yyCm5CUHoryeqeTf1DKM" alt="" width="563"><figcaption><p><em>Keycloak Realm</em> <em>SAML 2.0 Identity Provider Metadata</em></p></figcaption></figure>

Please ensure you have at least one active user in the Realm with a verified email.

With this, Keycloak's SAML SSO has been set up with Logilica. For further details on logging in with SSO, please navigate to the [**SSO Integration** ](/sso-integration.md)page.