<?php
/**
 * Keycloak SSO Configuration
 */

return [
	'enabled' => true,
	
	// Auto-login: Redirect to Keycloak automatically when user is not logged in
	// Set to false to show classic login form instead
	'auto_login' => true,
	
	// Keycloak server configuration
	'server_url' => 'https://connect.slm-lab.net/realms/cercle',
	'client_id' => 'page.slm-lab.net',
	'client_secret' => 'IGFw1QWDs9xQ7OyRp6YM8VRgQxn09tFF',
	
	// Redirect URL - MUST match exactly the one configured in Keycloak
	'redirect_uri' => 'https://www.slm-lab.net/admin/index.php?module=keycloak/callback',
	
	// Scopes
	'scope' => ['openid', 'profile', 'email'],
	
	// Options
	'auto_create_user' => false, // Create users automatically if they don't exist
	'sync_roles' => false, // Sync Keycloak roles with Vvveb roles
];