Technical : Authentication methods : Authentication methods : Configuring authentication - On-premise : Single Sign-On : Pac4j Keycloak adapter : Configuring the web server
Configuring the web server
To enable Single Sign-On (SSO) for the Planon ProCenter Web application, modify Root.xml located in:
…\Server\tomcat-*\conf\Catalina\localhost
1. Open Root.xml and remove:
a. the ForgotPasswordLoginValve valve.
b. the PnMessageFormAuthenticator valve.
2. Add the following valves above the ExcludingRoleValve valve:
<Valve className="com.planonsoftware.tomcat.keycloak.Pac4jKeycloakMcpServerAuthenticatorValve" />
<Valve className="com.planonsoftware.tomcat.keycloak.Pac4jBearerValidatorValve" planonFQDN="EDIT_THIS" keycloakConfigFile="ABSOLUTE_PATH_EDIT_THIS/Server/tomcat-EDIT_THIS*/keycloak.json"/>
<Valve className="com.planonsoftware.tomcat.keycloak.Pac4jKeycloakAuthenticatorValve" planonFQDN="EDIT_THIS" keycloakConfigFile="ABSOLUTE_PATH_EDIT_THIS/Server/tomcat-EDIT_THIS*/keycloak.json" />
 
Pac4j Keycloak adapter