Eclipse Che uses Keycloak to create, import, manage, delete, and authenticate users. Keycloak uses built-in authentication mechanisms and user storage. It can use third-party identity management systems to create and authenticate users. Eclipse Che requires a Keycloak token when you request access to Che resources.
Local users and imported federation users must have an email address in their profile.
The default Keycloak credentials are admin:admin. You can use the admin:admin credentials when logging into Eclipse Che for the first time. It has system privileges.
To find your Keycloak URL:
If Che is running on Kubernetes:
-
Go to
$CHE_HOST:5050/auth.
If Che is deployed on OpenShift:
-
Go to the OpenShift web console and navigate to the Keycloak namespace.