Skip to content

Keycloak Admin Console

The Keycloak Admin Console is the primary interface for configuring Keycloak settings that are relevant to Altair SLC Hub. This page explains how to access it, what you are expected to configure there, and what you should leave unchanged.

Accessing the console

Note

Only accounts with the appropriate admin role can access the Keycloak Admin Console. This typically includes users created with hubctl admin create and users who have been assigned the RealmAdmin role manually in Keycloak. Access through Altair SLC Hub RBAC alone is not sufficient.

To access the Keycloak Admin Console,

  1. Log in to the Altair SLC Hub portal with an account that has been granted Keycloak admin access.
  2. Click your profile icon in the top-right corner.
  3. Select Keycloak Admin Console.

Alternatively, the console is available directly at:

https://<your-hub-hostname>/keycloak/admin/slchub/console/

The slchub realm

Altair SLC Hub uses a dedicated Keycloak realm called slchub. All configuration related to Altair SLC Hub lives in this realm. When accessing the console via the Altair SLC Hub portal or the URL above, you will land in the slchub realm automatically.

Keycloak supports multiple realms — similar to namespaces — but Altair SLC Hub uses only the slchub realm. You do not need to create or manage any other realms.

User profile attributes

Altair SLC Hub defines custom user attributes (Unix username, UPN, and Unix user home path) in Keycloak's user profile configuration. These are pre-configured by Altair SLC Hub and do not need to be created manually.

You can view them at:

Keycloak Admin Console > Realm Settings > User Profile

What you should configure in Keycloak

The areas you are expected to configure directly in the Keycloak Admin Console are:

What you should not change

Altair SLC Hub manages certain Keycloak configuration automatically during installation and bootstrap.

You should not modify the following:

  • Client definitions — Altair SLC Hub portal, hubcli, and Altair Analytics Workbench
  • Client scopes managed by Altair SLC Hub
  • The slchub realm structure itself

If these are changed, Altair SLC Hub will fail to start because the configuration no longer matches what it expects.

If you have changed Altair SLC Hub-managed configuration and need to reset it, use the --forceupdate flag with the bootstrap command. This will overwrite your changes with Altair SLC Hub's expected configuration.