Configuring the web server
To make the Planon ProCenter Web application available for SSO, adapt the following files located in:
…\Server\tomcat-*\conf\Catalina\localhost
1. Open Root.xml and remove:
a. the ForgotPasswordLoginValve valve.
b. the PnMessageFormAuthenticator valve.
2. Add the following valve above the ExcludingRoleValve valve:
<Valve className="com.planonsoftware.tomcat.keycloak.Pac4jKeycloakMcpServerAuthenticatorValve"/>
<Valve className="com.planonsoftware.tomcat.keycloak.Pac4jBearerValidatorValve"/>
<Valve className="com.planonsoftware.tomcat.keycloak.Pac4jKeycloakAuthenticatorValve" planonFQDN="EDIT_THIS"/> 
<Parameter name="keycloak.config.file" value="ABSOLUTE_PATH_EDIT_THIS/Server/tomcat-EDIT_THIS*/keycloak.json" />