> ## Documentation Index
> Fetch the complete documentation index at: https://openmetadata-add-ontology-explorer-docs.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Implicit flow of Keyclock | Official Documentation

> Configure Keycloak’s Implicit Flow to support secure, frontend-based token issuance for fast browser-based authentication workflows.

# Implicit Flow

### Step 1: Create OpenMetadata as a new Client

* Click on `Clients` in the menu.
* Click on `Create Client` button.
* Select the `Client type`.
* Enter the `Client ID`.
* Enter the Name and Description `(Optional)`.
* Click on `Next` button.

<img src="https://mintcdn.com/openmetadata-add-ontology-explorer-docs/f2Jjgbtam_DxDDLy/public/images/deployment/security/keycloak/keycloak-step-3.png?fit=max&auto=format&n=f2Jjgbtam_DxDDLy&q=85&s=92372b93eed85f0e59c53d5c298fb7be" alt="add-client" width="2360" height="2022" data-path="public/images/deployment/security/keycloak/keycloak-step-3.png" />

### Step 2: Edit Configs of the client

* Select `Standard flow` and `Implicit flow` as an `Authentication flow`.
* Click `Next`.

<img src="https://mintcdn.com/openmetadata-add-ontology-explorer-docs/f2Jjgbtam_DxDDLy/public/images/deployment/security/keycloak/implicit-keycloak-step-4.png?fit=max&auto=format&n=f2Jjgbtam_DxDDLy&q=85&s=7047d709642e2442fa08d12ef52ff018" alt="compatibility configs" width="1782" height="2022" data-path="public/images/deployment/security/keycloak/implicit-keycloak-step-4.png" />

### Step 3: Add Login Settings

* fill the required options

<img src="https://mintcdn.com/openmetadata-add-ontology-explorer-docs/f2Jjgbtam_DxDDLy/public/images/deployment/security/keycloak/keycloak-step-5.png?fit=max&auto=format&n=f2Jjgbtam_DxDDLy&q=85&s=83aa66dc55efdb916063f469f08d8df7" alt="edit-settings-url.png" width="2360" height="2022" data-path="public/images/deployment/security/keycloak/keycloak-step-5.png" />

* Click on `Save` button.

<Tip>
  Note: Scopes `openid`, `email` & `profile` are required to fetch the user details so you will have to add these scopes in your client.
</Tip>

After the applying these steps, the users in your realm are able to login in the openmetadata, as a suggestion create a user called "admin-user". Now you can update the configuration of your deployment:

<CardGroup cols={3}>
  <Card title="Docker Security" href="/v1.13.x/deployment/security/keycloak/docker">
    Configure Keycloak SSO for your Docker Deployment.
  </Card>

  <Card title="Bare Metal Security" href="/v1.13.x/deployment/security/keycloak/bare-metal">
    Configure Keycloak SSO for your Bare Metal Deployment.
  </Card>

  <Card title="Kubernetes Security" href="/v1.13.x/deployment/security/keycloak/kubernetes">
    Configure Keycloak SSO for your Kubernetes Deployment.
  </Card>
</CardGroup>

<CardGroup cols={1}>
  <Card title="KeyCloak" href="/v1.13.x/deployment/security/keycloak">
    Go to KeyCloak Configuration
  </Card>
</CardGroup>
