1. SAML Integration Guide for PTT Pro and Profile Manager
  2. Configure Workcloud Communication
  3. Configure the PTT Pro Server
  • SAML Integration Guide for PTT Pro and Profile Manager
Configure the PTT Pro Server

Configure the PTT Pro Server

The customer profile in the PTT Pro server supports an OAuth connection. Modify the configuration to use Keycloak for user authorization.
The configuration of the PTT Pro server requires:
  • OAuth URL
  • Access URL
  • OAuth Certificate
PTT Pro OAuth Configuration
If you are using a shared device model using OAuth:
  • The device serial numbers must be provisioned in the server.
  • The User definition requires that the Oauth Name field is populated correctly, as shown below. The Oauth name must match the username in the SAML server.
PTT Pro User with SAML username

Obtain the OAuth and Access URLs

You can find the OAuth and Access URLs in the Keyloak server or from a URL.
To find the URLs through the KeyCloak user interface, navigate to
Realm Settings
 and click on
OpenID Endpoint Configuration
 under
Endpoints
.
OpenID Endpoint Configuration
To find the URLs through a web link, substitute
<WFC-SAML-Test-Realm>
 with the name of the Realm in the following URL:
https://wfc-keycloak.pttpro.zebra.com/auth/realms/
<WFC-SAML-Test-Realm>
/.well-known/openid-configuration
The output from the Keycloak user interface and the URL are shown below.
Authorization URL for PTT Pro OAuth URL Field
Access URL for PTT Pro Access URL Field

Obtain the OAuth Certificate

See Exporting the ACS Certificate to PTT Pro for the process of exporting the OAuth certificate to the PTT Pro server.