Manually Adding Users

To add users manually via Keycloak's web interface, follow these steps to create and configure new compliance officer accounts for your organisation:

Obtain Keycloak Admin URL

Locate your Keycloak instance at compliance-dashboard.yourDomain.com/auth, where compliance-dashboard.yourDomain.com should be replaced with the URL where your Compliance Dashboard is accessed from (compare with .Values.complianceDashboard.domain).

Login Into Keycloak As Admin

Login with the admin credentials you provisioned when spawning the reference deployment (.Values.keycloak.adminUser and .Values.secrets.keycloakAdminPassword).

Select Realm

In the menu at the top left you will see that the master Keycloak realm is selected by default.

Click on Manage Realms and click on 21travel.

You should now see that 21travel (displayed as "21 Analytics") is now the current realm.

Navigate To Users Tab

Go to "Users". The screenshot below shows an existing user. On a fresh installation, the user list may be empty.

Create New User

Click "Create new user" if the user list is empty, or "Add user" if users already exist, and add the Username for the compliance officer user.

Click on "Create". You will then be redirected to the Details tab where you can see the information you provided.

Set Temporary Password For New User

Next, we will navigate to the Credentials tab to set a temporary password.

Now we will click on "Set Password" and add a temporary password. Make sure the temporary toggle is active. Once the password is set click on "Save" and then confirm by clicking on "Save Password".

Assign Permissions (Enterprise)

On a new Enterprise instance, the user has no 21 Travel Rule permissions until you assign roles. Follow the authorisation guide before asking them to sign in. If you do not need restricted access, assign the travel.admin role to give the user full access.

Inform Compliance Officer about Created Username and Password

You can now give the username and password to the compliance officer user so they can log in. They will be requested to update their password.

Afterwards, you can log in with your created users into the 21travel compliance dashboard. We will be using another user name 'Bitcoin Exchange AG' throughout the documentation.