Skip to main content

Introduction

We use Keycloak as our SSO (Single Sign-On) provider for authentication and user management across all internal services.

You can assign user roles and manage access via the Keycloak admin panel.

This section covers how to:

  • Add and manage users in SSO
  • Set up projects for new team members
  • Assign roles and permissions in SSO

Use this folder as a quick reference for all admin-related tasks.

Accessing Keycloak Admin​

  1. Go to the Keycloak Admin Panel:
    https://sso.queenofgaya.com/

  2. Log in with your admin credentials.

  3. From the top-left realm dropdown, select:
    Witty

Add User Screenshot

Keycloak Groups​

ℹ️ Note: Groups in Keycloak are used to auto-assign roles and permissions across internal services like Gerrit, Jenkins, etc

Below is a quick reference of the default groups and what access they provide:

GroupPermissions Description
developerCan access Jenkins, Gerrit (push, pull, create)
reviewerCan review & merge in Gerrit
gerrit-adminFull control over Gerrit repositories and group-level permissions
jenkins-adminFull control over Jenkins repositories and group-level permissions