Configure SSO for your status page with Keycloak

Configure SAML SSO for Statuspal using Keycloak as the identity provider.

1. Create a SAML client in Keycloak

1. Log in to the Keycloak admin portal and click Clients in the sidebar, then click Create.

2. You can either upload the Statuspal metadata XML (from your organization's Security tab) via Add File beside the Import heading, or enter the client ID manually.

2. Configure assertions

1. Set Sign assertions to ON.

2. Set Encrypt assertions and Client Signature Required to OFF.

3. Configure the Name ID format

Scroll down on the same screen and:

1. Set Force Name ID Format to ON.

2. Set Name ID Format to email.

This step is critical. Statuspal requires the Name ID to be the user's email address. If you skip this, SAML authentication will fail. Also ensure that Keycloak admin users have an email address set before testing.

4. Share Keycloak metadata with Statuspal

1. Click Realm Settings in the left sidebar.

2. Click SAML 2.0 Identity Provider Metadata to download the metadata XML.

3. Copy the contents and paste them into the IDP metadata field in your Statuspal SSO setting.

4. Click Update, then click Test SAML configuration to verify.