[Identity Brokering](https://www.keycloak.org/docs/latest/server_admin/#_identity_broker)

section.

The first part of configuring the identity broker is to add a new Realm. This

([this Keycloak document](https://www.keycloak.org/docs/latest/server_admin/#saml-v2-0-identity-providers)

provides additional information about adding a SAML 2.0 Identity Provider).

1. On the IdP configuration page, specify an **Alias** to use for your IdP

provider.

1. Scroll to the bottom of the configuration page and upload the IdP metadata

you exported from JumpCloud.

1. Navigate to **Authentication**.

1. Select the **Browser** flow from the dropdown in the top-left.

1. Find the **Identity Provider Redirector** row and click **Actions** >

**Config**.

1. Set **Alias** and **Default Identity Provider** to the alias of the identity

provider you created earlier.

1. Navigate to **Clients** and click **Create**.

1. Add a new OIDC Client to point to your Coder deployment and click **Save**.

1. Once on the **Clients** configuration page, set the **Access Type** to

**Confidential** and click **Save**.

1. Your client configuration should look something like the following (make sure

that all of the values point to your Coder deployment):

At this point, you can configure your Coder deployment to use the Keycloak OIDC

Connector.

1. Add the **Secret** to the **Client Secret** field (you can get this value

from the **Credentials** page in the Keycloak Clients Configuration).

1. Add your Keycloak instance and Realm as the `Issuer`. This will be a URL

formatted as follows: `https://<my-keycloak-url>/auth/realms/<my-realm>`