In Arbitre, users are created and managed using Keycloak.
Create a user account in Keycloak and provide the user a temporary password. See Keycloak documentation
<aside> ⚠️ Make sure to include an email address in the Keycloak user account. Otherwise, the user won’t be able to connect to Arbitre.
</aside>
Upon logging in, the user will be prompted to chose a new password.
Then, a Django user will be automatically created, with the same username and email.
The user only exists in Django after the first Keycloak log-in.
Keycloak and Django users are linked through email address. Do not change the email address on either sides.
<aside> ⚠️ Althought the Django administration lets you create users directly, always create users in Keycloak.
</aside>


<aside> ⚠️ The “teacher” role should always exist. Arbitre will create it if it is missing on startup.
</aside>