anchor.diff:  * Via Keycloak subsystem
   
   In this example let's use the second option, use the Keycloak subsystem, so our WAR is free from this kind of settings.
  -If you want to use the per WAR approach, please take a look http://www.keycloak.org/docs/latest/securing_apps/topics/oidc/java/jboss-adapter.html[here].
  +If you want to use the per WAR approach, please take a look http://www.keycloak.org/docs/latest/securing_apps/index.html#jboss-eap-wildfly-adapter[Required Per WAR Configuration].
   
   Edit the configuration file _$JBPM_HOME/standalone/configuration/standalone-full.xml_ and locate the subsystem configuration section.
   Add the following content:
  
positive.code: 
  * Go to the __Installation__ tab in same __kie-git__ client configuration screen and export using the __Keycloak OIDC JSON__ type.
  * Finally copy this generated JSON file into an accessible directory on the server's file system or add it in the application's classpath. Use this path value as the __keycloak-config-file__ argument for the above configuration of the __org.keycloak.adapters.jaas.DirectAccessGrantsLoginModule__ login module.
  * More information about Keycloak JAAS Login modules can be found https://keycloak.gitbooks.io/securing-client-applications-guide/content/v/2.2/topics/oidc/java/jaas.html[here].
  
  At this point, the internal Git repositories can be cloned by all users authenticated via the Keycloak server:
  
  
negative.code: === Install the KC adapter
  
  
  In order to use the Keycloak's authentication and authorization modules from the jBPM application, the http://www.keycloak.org/docs/latest/securing_apps/#jboss-eap-wildfly-adapter[Keycloak JBoss EAP/Wildfly Adapter] must be installed on our server at __$JBPM_HOME__.
  Keycloak provides multiple adapters for different containers out of the box, if you are using another container or need to use another adapter, please take a look at the http://www.keycloak.org/docs/latest/securing_apps/index.html[Securing Applications section] from the Keycloak docs.
  Here are the steps to install and set up the adapter for Wildfly 11/10/9:
  
  * Download the adapter from https://downloads.jboss.org/keycloak/3.4.3.Final/adapters/keycloak-oidc/keycloak-wildfly-adapter-dist-3.4.3.Final.zip[Keycloak Client Adapter for Wildfly 11/10/9]
  * Execute the following commands on your shell:
  +
  [source]
  ----
  cd $JBPM_HOME
  unzip keycloak-wildfly-adapter-dist-3.4.3.Final.zip // Install the KC client adapter
  
  cd $JBPM_HOME/bin
  ./standalone.sh -c standalone-full.xml // set up the KC client adapter.
  
  // ** Once server is up, open a new command line terminal and run:
  cd $JBPM_HOME/bin
  