IdP Urupema is the single sign-in of Instituto Urupema. An app sends the person to the IdP, receives a signed proof of who the person is (OpenID Connect), and decides on its own what that person may do. Apps use only the standard protocol: no SDK of ours, no admin API, nothing specific to Keycloak, the engine underneath.
The issuer is https://id.institutourupema.com.br/realms/urupema. Endpoints and signing keys come from its discovery document.
Integrate an appRegister, copy the tested server code, run the production list.
Read the contractWhat the IdP guarantees and what every app must do, rule by rule.
