idp-register-keycloak

What problem does it solve?

Manually configuring Keycloak realms, OAuth2 clients, roles, and secrets for each new project is time-consuming, error-prone, and leads to inconsistent security configurations across teams. This skill automates the entire end-to-end provisioning process, ensuring every project's identity provider setup is compliant with organizational v1 conventions by default.

Core Features & Use Cases

• Idempotent IdP Provisioning: Automatically creates or updates Keycloak realms, clients, roles, and scopes based on the project's spec, skipping existing resources to avoid duplicates and support safe re-runs.
• Secure Secret Management: Stores confidential client secrets in Vault or generates .env placeholders for local development, eliminating hardcoded credentials and reducing security risk.
• Use Case: When scaffolding a new microservice project, use this skill to automatically set up its dedicated Keycloak realm, OAuth2 clients, and roles without manual admin console work, ensuring consistent security across all services.

Quick Start

Use the idp-register-keycloak skill to provision the Keycloak realm and OAuth2 clients for your new orders-platform project as defined in its project spec.