anchor.diff:  
   In order to customize an existing jBPM application (WAR file) for using the Keycloak security management provider please follow the next steps:
   
  -. Add the artifact __keycloak-core-1.9.x.Final.jar__ into __WEB-INF/lib__
  -. Add the artifact __keycloak-common-1.9.x.Final.jar__ into __WEB-INF/lib__
  +. Add the artifact __keycloak-core-x.y.z.Final.jar__ into __WEB-INF/lib__
  +. Add the artifact __keycloak-common-x.y.z.Final.jar__ into __WEB-INF/lib__
   . Remove the actual __jar__ artifact for any security management provider in use from __WEB-INF/lib__ (eg: remove __WEB-INF/lib/uberfire-security-management-wdilfly-x.y.Z.jar__)
   . Replace the content for __WEB-INF/classes/security-management.properties__ by:
   [source]
  
positive.code: 
  Consider these main steps for building this environment:
  
  * Install and setup a Keycloak server
  * Create and setup a Realm for this example - Configure realm's clients, users and roles
  * Install and setup the SSO client adapter & jBPM application
  
  Note: The resulting environment and the different configurations for this document are based on the jBPM (KIE) Workbench, but same ones can also be applied for the KIE Drools Workbench as well.
  
  == Install and setup a Keycloak server
  
  
  Keycloak provides an extensive documentation and several articles about the installation on different environments.
  This section describes the minimal setup for being able to build the integrated environment for the example.
  Please refer to the http://www.keycloak.org/documentation.html[Keycloak documentation] if you need more information.
  
  Here are the steps for a minimal Keycloak installation and setup:
  
  * Download latest version of Keycloak from the http://www.keycloak.org/downloads.html[Downloads] section. This example is based on Keycloak 1.9.0.Final
  * Unzip the downloaded distribution of Keycloak into a folder, let's refer it as
  
negative.code: Follow these steps in order to add an execution server into this environment:
  
  * Create the client for the execution server on Keycloak
  * Install set up and the Execution server (with the KC client adapter)
  
  
  === Create the execution server's client on Keycloak
  