> ## Documentation Index
> Fetch the complete documentation index at: https://docs.open-metadata.org/llms.txt
> Use this file to discover all available pages before exploring further.
# Auth code flow of Keyclock | Official Documentation
> Implement Keycloak’s Authorization Code Flow for backend-based secure logins using token exchange, identity claims, and session control.
# Auth Code Flow
### Step 1: Create OpenMetadata as a new Client
* Click on `Clients` in the menu.
* Click on `Create Client` button.
* Select the `Client type`.
* Enter the `Client ID`.
* Enter the Name and Description `(Optional)`.
* Click on `Next` button.
### Step 2: Edit Configs of the client
* Enable `Client authentication` and `Authorization`.
* Select `Standard flow` as an `Authentication flow`.
* Click `Next`.
### Step 3: Add Login Settings
* fill the required options
* Click on `Save` button.
Note: Scopes `openid`, `email` & `profile` are required to fetch the user details so you will have to add these scopes in your client.
### Step 3: Where to Find the Credentials
* Navigate to the `Credentials` tab.
* You will find your `Client Secret` related to the Client id "open-metadata"
After the applying these steps, the users in your realm are able to login in the openmetadata, as a suggestion create a user called "admin-user". Now you can update the configuration of your deployment:
Configure Keycloak SSO for your Docker Deployment.
Configure Keycloak SSO for your Bare Metal Deployment.
Configure Keycloak SSO for your Kubernetes Deployment.
Go to KeyCloak Configuration