mw dev keycloak

Keycloak is an open source identity manager that supports OpenID Connect and SAML single sign-on.

Use the service commands to create, start, stop, or destroy its container. The add, delete, list, and get subcommands manage realms, clients, and users, or retrieve their metadata. Each subcommand’s --help describes its arguments.

For direct administration, open a shell in the running container:

mw dev keycloak exec -- bash

Use /opt/keycloak/bin/kcadm.sh there for operations beyond the built-in subcommands. See the Keycloak Admin CLI guide for its syntax.

Relevant extensions for this service include:

• PluggableAuth
• OpenID Connect

Learn more

For a workflow creating a realm, client, and user and configuring MediaWiki’s OpenID Connect login, see mw help guides dev keycloak.

Commands

• mw dev keycloak add — Add a keycloak realm, client, or user
• mw dev keycloak create — Create the containers
• mw dev keycloak delete — Delete keycloak realm, client, or user
• mw dev keycloak destroy — Destroy the containers
• mw dev keycloak exec — Execute a command in the main container
• mw dev keycloak get — Get metadata for keycloak realm, client, or user
• mw dev keycloak image — Interact with the image used for the service
• mw dev keycloak list — List keycloak realms, clients, or users
• mw dev keycloak start — Start the containers
• mw dev keycloak stop — Stop the containers

Global options

-c, --context <string>

Development context to use (overrides CONTEXT) Default: default.

--help

Help for this command

--no-interaction

Do not ask any interactive questions

-v, --verbose <count>

Increase output verbosity. Example: --verbose=2 or -vv

See also

• mw dev