# Configure OIDC on Keycloak for a Web Service
This section will guide you in configuring authentication via OIDC with Keycloak.
## Client Configuration
1. Go to the "Clients" page and click on the "Create" button :
2. Assign a name to the “Client ID” (necessary for the configuration on the BMS).
3. Set the “Access Type” to “confidential”.
4. Set “Service Accounts Enabled” to “true”.
5. Add “Root URL”, “Valid Redirect URLs”, “Admin URL”, and “Web Origins” with the address of the BMS where the Web Service is located. In the example below, dev.mars :
6. Click on “Save” at the bottom of the page.
## Configuration of the Web Service Authentication for BMS
### Retrieve the Client Secret
Go to the “Credentials” tab of the client and retrieve the secret (necessary for configuration in the BMS).
### Retrieve the token URL
1. Go to “Realm Settings.”
2. Click on “OpenID Endpoint Configuration.”
3. At the bottom of the file, locate “token\_endpoint.”
4. Copy the value to configure it in the BMS.
### Configuration of the web service in the BMS
All that remains is to go to the BMS and fill in the following fields :
* **Token URL**: To retrieve it, simply follow these [steps](#retrieve-the-token-url).
* **Client ID**: Configured during the creation of the [Client](#client-configuration).
* **Client Secret**: To retrieve it, simply follow this [step](#retrieve-the-client-secret).
