In Current production we are running Two Applications one on WebSphere Application Server 7.0 and one with WebSphere Portal Server 6.1. User currently login to WebSphere Portal and can redirect to WAS if needed. The SSO done by LTPA based SSO on both server. So no need to login to WAS if user already logged in WPS (Portal Server).
Now our requirement to allow Keycloak user to login to WebSphere Portal server. For this we have setup the Keycloak server and Keycloak is successfully redirecting the user to WebSphere Portal server. But we are stuck to validate the Keycloak openID token in WebSphere to retrieve the user and set UserPrinciple in WebSphere Portal server.
How we can create the PortalSession from Keycloak sso token?