> For the complete documentation index, see [llms.txt](https://docs.catalyx.solutions/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.catalyx.solutions/catalyx-blockchain-manager/canton-network/version-2.0/console-guide-canton/validators/access/identity.md).

# Identity

The **Identity** page displays the authentication and identity configuration for this validator.

<div data-with-frame="true"><figure><img src="/files/rwjZSqmqG62lxcQqT9Xg" alt=""><figcaption></figcaption></figure></div>

***

### Status Cards

Three summary cards are shown at the top of the page:

| Card                 | Description                                                                 |
| -------------------- | --------------------------------------------------------------------------- |
| **Auth enabled**     | Whether authentication is enabled for this validator (e.g. `Yes`).          |
| **Managed Keycloak** | Whether the Keycloak instance is managed by CAT-BM (e.g. `Managed`).        |
| **Provisioned**      | Whether the identity configuration has been fully provisioned (e.g. `Yes`). |

***

### Realm

The **Realm** section contains the OIDC and Keycloak configuration details for this validator:

| Field                    | Description                                                                           |
| ------------------------ | ------------------------------------------------------------------------------------- |
| **Auth URL**             | The Keycloak authentication URL for this validator's realm.                           |
| **Target audience**      | The intended audience for tokens issued by this realm.                                |
| **Ledger API client ID** | The OIDC client ID used by the validator backend to authenticate with the Ledger API. |
| **Ledger API user**      | The Keycloak user account associated with the Ledger API client.                      |
| **CNS UI client ID**     | The OIDC client ID used by the Canton Name Service UI.                                |
| **Wallet UI client ID**  | The OIDC client ID used by the Wallet UI.                                             |
| **Wallet user**          | The Keycloak user account associated with the Wallet UI.                              |
| **Management scope**     | The OAuth scope used for management operations (e.g. `daml_ledger_api`).              |

Copy icons next to each field allow copying values to the clipboard.

{% hint style="info" %}
\[TODO: document when identity configuration is set up — e.g. automatically on validator creation, or requiring a separate provisioning step — and what to do if provisioning shows as incomplete]
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.catalyx.solutions/catalyx-blockchain-manager/canton-network/version-2.0/console-guide-canton/validators/access/identity.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.