# Keycloak

{% stepper %}
{% step %}

### Create Keycloak Client

Create a new client named `tradecraft-ui` via the Keycloak admin UI. Give it the standard flow so users can OAuth into the Tradecraft UI, and allow direct user grants.

<figure><img src="/files/jAlVv3UzwfJ9vrXefHEn" alt=""><figcaption></figcaption></figure>

Add the hostname as a valid redirect URL:

<figure><img src="/files/vuNdyrXKm0Yv7dSnXEo9" alt=""><figcaption></figcaption></figure>

You will need to add a default client scope which will map the appropriate audience for your validator. The Splice instructions has this set to `https://canton.network.global` by default and you may already have an existing scope for this, as it’s usually needed for configuring Splice.

Here is an example scope mapper:

<figure><img src="/files/tB431LK5mKA4pNuWU0K4" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

### Create Keycloak User

Create a new user in Keycloak called `tradecraft` and give it a *non-temporary* password.&#x20;

{% hint style="info" %}
While you technically can use an existing account on the node, it is *highly* recommended not to do so.\
\
Additionally, using the primary party on the node is strictly not allowed.
{% endhint %}

Login to your validator’s wallet app and press the big “ONBOARD YOURSELF” button to be issued a Party ID, which will be displayed in the top right corner of the wallet UI.

<figure><img src="https://lh3.googleusercontent.com/keep-bbsk/AFgXFlL9uFzp3C9QOWic_ecBcCa8aVNGKzOmzufo8GPvICfHyO2P5ofN4xOIqPMV4-eNVCztlINIfZqZ67i5Fj8RFk5Kyt3s6O-rx6mxCE7d_PIXZvgrmpHn3w=s1009" alt=""><figcaption></figcaption></figure>

<figure><img src="https://lh3.googleusercontent.com/keep-bbsk/AFgXFlKsx0CVrfE3YVSwgNkYXFrx0e_9uiUvLon4oivvAEHRZCI9SWtJbecQMg5OIpleG3RfyCDY7YgHeks6cltV9IFP0Bw5FMk3Zotvm3-1IJxCRMPXKv9wjQ=s1009" alt=""><figcaption></figcaption></figure>
{% endstep %}
{% endstepper %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.tradecraft.fi/app-documentation/installation/interactive-blocks/keycloak.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.