...
In DualShield a user directory is called a domain, whereas in Keycloak a user directory is called a realm. We will map a realm in Keycloak to a domain in DualShield. As Keycloak does not have the concept of the domain and OU, we will first map a realm in Keycloak to a an LDAP OU, then map the LDAP OU to a domain in DualShield
...
By using OU, we can also support multiple realms in Keycloak. Any realm in Keycloak can be mapped to a domain in DualShield via an LDAP OU in LDAP.
| Info |
|---|
Please note that in DualShield there is a component called realm as well. However, a realm in DualShield is a group of domains, instead of a single domain. |
...