use new keycloak

Author: sophiebsw

apache2/sites-enabled/25-rt.ocf.berkeley.edu.conf

@@ -20,13 +20,13 @@
   OIDCClientSecret ${CLIENT_SECRET}
 
   OIDCRemoteUserClaim preferred_username
-  OIDCScope "openid profile"
+  OIDCScope "openid profile groups"
   OIDCXForwardedHeaders X-Forwarded-Host X-Forwarded-Port X-Forwarded-Proto
 
   <Location "/">
     AuthType openid-connect
-    Require claim roles:ocfstaff
-    Require claim roles:opstaff
+    Require claim ocfstaff
+    Require claim opstaff
     SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
 
     SetHandler modperl