Identity Config 0.5.0
These notes preserve manual upgrade steps from older UDS Identity Config versions. Use them when supporting an older UDS Core deployment that may have skipped a historical Keycloak realm change.
Group authorization
Section titled “Group authorization”UDS Identity Config v0.5.0 added a new authentication flow for group authorization.
To add group authorization to browser flows:
- In the Keycloak admin portal, navigate to the
udsrealm. - Go to Authentication.
- Add UDS Operator Group Authentication Validation at the base level and bottom of these flows:
- UDS Authentication
- UDS Registration
- UDS Reset Credentials
If you use a SAML identity provider, create a dedicated Authorization flow:
- Go to Authentication.
- Click Create flow.
- Set Name to
Authorization. - Set Description to
UDS Operator Group Authentication Validation. - Select Basic flow.
- Click Create.
- Click Add execution.
- Add UDS Operator Group Authentication Validation.
- Go to Identity providers and select the SAML provider.
- In Advanced settings, set Post login flow to
Authorization.
Related documentation
Section titled “Related documentation”- Legacy upgrade notes - preserved manual steps for older Identity Config versions
- Upgrade Keycloak realm configuration - current guidance for manual Keycloak realm changes