From 9d3763cf730f5982607fc69a6727b44ff585894a Mon Sep 17 00:00:00 2001
From: Ingo Richtsmeier <ingo.richtsmeier@camunda.com>
Date: Tue, 22 Oct 2024 11:14:02 +0200
Subject: [PATCH] Add special config for Web Modeler application/client

---
 .../self-managed/setup/guides/connect-to-an-oidc-provider.md | 5 +++--
 .../self-managed/setup/guides/connect-to-an-oidc-provider.md | 5 +++--
 .../self-managed/setup/guides/connect-to-an-oidc-provider.md | 5 +++--
 3 files changed, 9 insertions(+), 6 deletions(-)

diff --git a/docs/self-managed/setup/guides/connect-to-an-oidc-provider.md b/docs/self-managed/setup/guides/connect-to-an-oidc-provider.md
index 366a80c395..ef8c0ea09e 100644
--- a/docs/self-managed/setup/guides/connect-to-an-oidc-provider.md
+++ b/docs/self-managed/setup/guides/connect-to-an-oidc-provider.md
@@ -34,11 +34,12 @@ configuration](#component-specific-configuration) to ensure the components are c
 <h3>Steps</h3>
 
 1. In your OIDC provider, create an application for each of the components you want to connect. The expected redirect URI of the component you are configuring an app for can be found in [component-specific configuration](#component-specific-configuration).
-2. Make a note of the following values for each application you create:
+2. For all components except Web Modeler, the application has to be of confidential access type, which is known in Keycloak as setting Client authentication to On. For Web Modeler, which is a single page web application, the application has to be of public access type. This is setting the Client authentication to Off in Keycloak.
+3. Make a note of the following values for each application you create:
    - Client ID
    - Client secret
    - Audience
-3. Set the following environment variables for the component you are configuring an app for:
+4. Set the following environment variables for the component you are configuring an app for:
 
 <Tabs groupId="optionsType" defaultValue="env" queryString values={[{label: 'Environment variables', value: 'env' },{label: 'Helm values', value: 'helm' }]} >
 <TabItem value="env">
diff --git a/versioned_docs/version-8.5/self-managed/setup/guides/connect-to-an-oidc-provider.md b/versioned_docs/version-8.5/self-managed/setup/guides/connect-to-an-oidc-provider.md
index 7751daf5eb..379b634a44 100644
--- a/versioned_docs/version-8.5/self-managed/setup/guides/connect-to-an-oidc-provider.md
+++ b/versioned_docs/version-8.5/self-managed/setup/guides/connect-to-an-oidc-provider.md
@@ -34,11 +34,12 @@ configuration](#component-specific-configuration) to ensure the components are c
 <h3>Steps</h3>
 
 1. In your OIDC provider, create an application for each of the components you want to connect. The expected redirect URI of the component you are configuring an app for can be found in [component-specific configuration](#component-specific-configuration).
-2. Make a note of the following values for each application you create:
+2. For all components except Web Modeler, the application has to be of confidential access type, which is known in Keycloak as setting Client authentication to On. For Web Modeler, which is a single page web application, the application has to be of public access type. This is setting the Client authentication to Off in Keycloak.
+3. Make a note of the following values for each application you create:
    - Client ID
    - Client secret
    - Audience
-3. Set the following environment variables for the component you are configuring an app for:
+4. Set the following environment variables for the component you are configuring an app for:
 
 <Tabs groupId="optionsType" defaultValue="env" queryString values={[{label: 'Environment variables', value: 'env' },{label: 'Helm values', value: 'helm' }]} >
 <TabItem value="env">
diff --git a/versioned_docs/version-8.6/self-managed/setup/guides/connect-to-an-oidc-provider.md b/versioned_docs/version-8.6/self-managed/setup/guides/connect-to-an-oidc-provider.md
index 366a80c395..ef8c0ea09e 100644
--- a/versioned_docs/version-8.6/self-managed/setup/guides/connect-to-an-oidc-provider.md
+++ b/versioned_docs/version-8.6/self-managed/setup/guides/connect-to-an-oidc-provider.md
@@ -34,11 +34,12 @@ configuration](#component-specific-configuration) to ensure the components are c
 <h3>Steps</h3>
 
 1. In your OIDC provider, create an application for each of the components you want to connect. The expected redirect URI of the component you are configuring an app for can be found in [component-specific configuration](#component-specific-configuration).
-2. Make a note of the following values for each application you create:
+2. For all components except Web Modeler, the application has to be of confidential access type, which is known in Keycloak as setting Client authentication to On. For Web Modeler, which is a single page web application, the application has to be of public access type. This is setting the Client authentication to Off in Keycloak.
+3. Make a note of the following values for each application you create:
    - Client ID
    - Client secret
    - Audience
-3. Set the following environment variables for the component you are configuring an app for:
+4. Set the following environment variables for the component you are configuring an app for:
 
 <Tabs groupId="optionsType" defaultValue="env" queryString values={[{label: 'Environment variables', value: 'env' },{label: 'Helm values', value: 'helm' }]} >
 <TabItem value="env">