Skip to main content

Deployments

A Deployment is a Phase Two hosted instance of a Realm in a Phase Two enhanced Keycloak cluster. These clusters can be shared with other customers, or dedicated for customers in paid plans. Free, shared plans are allowed one Deployment per customer, and dedicated plans can create up to 20 Realms per cluster.

Regions​

Shared clusters are currently operating in the following regions:

  • AWS US West (Oregon) us-west-2
  • AWS Europe (Frankfurt) eu-central-1

Dedicated clusters can be launched in most AWS or GCP regions by request.

Creating a Deployment​

Once you have logged in the self-service tool, click on the Deployments menu item and select the Create Deployment button. You must input a name, choose a region, and (optionally) select a cluster if you are creating a Deployment in a dedicated cluster.

Opening the console​

Next to active Deployments in the list, you can select the Open Console link to create a login link and open it in another browser window.

Phase Two Self Service Open Console Link

Issues with access to the Admin Console​

The Open Console link doesn't work

Access to the Admin Console using the Open Console link requires your Deployment Realm to have a user with the username admin, which is automatically created when the Deployment is provisioned. In order to maintain access using this mechanism, you must not change this username or its role mappings. Sometimes, if you have Email as username set in your Realm, you might inadvertently change the username by changing the email. If you have lost access and need us to restore the admin account, please email support@phasetwo.io.

You can also create a backup account to access your Deployment directly. Create an account with all realm-management Client Roles assigned, and you will be able to log in and use the direct link to the Admin Console below. You can also create admin accounts that are assigned restricted permissions (e.g. only managing users) by selecting a subset of the realm-management Client Roles.

Direct Admin Console URL​

You may choose to access the Admin Console directly for users with admin roles. Construct the URL as below:

https://{cluster-host}/auth/admin/{realm-name}/console

- cluster-host: The hostname of the Cluster (shared or dedicated)
- realm-name: The name of the Deployment

I've lost access to the Admin Console!

In addition to the above issue with removing the admin account, another restriction is that you cannot change the name of your Deployment in the Realm Settings of the Account Console. While it is technically supported in Keycloak, it can produce problems, and causes the metadata we use to log you in from the dashboard to be inaccurate. Because of this, we do not support changing Deployment names after they are created. If you need to change the name, you can delete your Deployment and create a new one.