anchor.diff:  
   Let's install, setup and deploy the execution server:
   
  -* Install another Wildfly server to use for the execution server and the KC client adapter as well. You can follow above instructions for the Workbench or follow the https://keycloak.github.io/docs/userguide/keycloak-server/html/ch08.html[official adapters documentation]
  +* Install another Wildfly server to use for the execution server and the KC client adapter as well. You can follow above instructions for the Workbench or follow the http://www.keycloak.org/docs/latest/securing_apps/index.html[securing applications guide]
   * Edit the _standalone-full.xml_ file from the Wildfly server's configuration path and configure the KC subsystem adapter as:
   +
   [source,xml]
  
positive.code: === Install the KC adapter
  
  
  In order to use the Keycloak's authentication and authorization modules from the jBPM application, the https://keycloak.github.io/docs/userguide/keycloak-server/html/ch08.html[Keycloak adapter] for Wildfly must be installed on our server at __$JBPM_HOME__.
  Keycloak provides multiple adapters for different containers out of the box, if you are using another container or need to use another adapter, please take a look at the https://keycloak.github.io/docs/userguide/keycloak-server/html/ch08.html[adapters configuration ]from Keycloak docs.
  Here are the steps to install and setup the adapter for Wildfly 8.2.x:
  
  * Download the adapter from https://repository.jboss.org/nexus/service/local/repositories/central/content/org/keycloak/keycloak-wf8-adapter-dist/1.9.0.Final/keycloak-wf8-adapter-dist-1.9.0.Final.zip[here]
  
negative.code: * _Credential_ - Use the password value for the _kie_ client. You can find it in the Keycloak admin console -> Clients -> kie -> Credentials tab -> Copy the value for the __secret__.
  
  For this example you have to take care about using your concrete values for _secure-deployment_ name, _realm-public-key_ and _credential_ password.
  
  [IMPORTANT]
  ====
  Ensure the following tag is NOT present in the Widfly/EAP profile's configuration file (eg: standalone.xml):
  [source]
  ----
  <single-sign-on/>
  ----
  It's enabled by default in some server versions. If present, it must be removed/disabled in order to allow Keycloak to properly handle the clients.
  ====
  
  === Run the environment
  
  