Keycloak configuration
Keycloak is an Identity and Access Management software S3 application uses to identify S3 users and protect S3 application from unauthorized access.
Please refer to official Keycloak site for any details not included in the current guide.
Basic configuration
By default Keycloak is configured to accept authentication requests from any resource. It should be limited only to requests from S3 application.
Navigate https://server_domain_name/auth 
Press "Administration Console":
Enter administrator username and password you have specified in the .env file when installing the application: KEYCLOAK_USER and KEYCLOAK_PASSWORD fields.
Navigate to "Clients" menu item:
Press the "fm-frontend" link in the Clients table and enter server domain name in the corresponding fields:
- Valid Redirect URIs:
https://server_domain_name/* - Base URL:
https://server_domain_name - Web Origins:
https://server_domain_name
where server_domain_name is the domain name of the application.
Press "Save" button.
Email configuration
Emails are used to notify users of the changes made in their accounts.
By default emails are configured to use cloud S3 application SMTP server. Navigate to "Realm Settings" menu item, the "Email" tab and specify your corporate email account settings:
That should be enough for S3 application to operate.
Other configurations
For other configurations (e.g. Session timeouts, Password Policy or One-time password (OTP) Policy) please refer to official Keycloak documentation.