Keycloak Realm configuration

The Keycloak administrator management console will consist of the following components: 

  • Keycloak Realms
  • master Realm: Identity and access services to the Keycloak IDP. 
  • gv Realm: IAM services for Forcepoint DSPM admin console. This will be unique for each customer. 
Note: Realm names are permanent and cannot be changed.

When logging into Keycloak, the master Realm is selected and displayed by default. Change the Realm to gv.

In the gv realm, user identities are created for Forcepoint DSPM administrator dashboard access. Service accounts for authentication and other components are also created here. For example, the AD agent and other endpoints. 

In the master realm, user identities are created for the Keycloak administrator who manages Forcepoint DSPM identities and access.