PCFDev is the single VM offering of Pivotal Cloud Foundry. It uses UAA, just like Cloud Foundry, so it’s worth understanding how to access the UAA server running on that machine in order to utilize it as an authorization server for your applications or to test it for various other scenarios.
PCFDev uses a single wildcard domain for apps and components running inside of its Cloud Foundry Deployment: *.local.pcfdev.io. The PCFDev machine is configured for both http and https traffic. As a result, the UAA server is accessible at http://uaa.local.pcfdev.io and https://uaa.local.pcfdev.io.
Next, you’ll need to obtain the UAA admin client secret in order to login using the uaac. These credentials are available in running VM. PCFDev uses Vagrant, so you simply need to navigate to the PCFDev directory using your terminal, and use vagrant ssh to log into the running machine. Once logged in, the admin client secret can be found in the file /var/vcap/jobs/uaa/config/uaa.yml. Basically though, the admin client secret is hard coded to admin-client-secret for this deployment.
With these pieces of information, you can login to UAA as the admin client, and create new UAA zones, and manage clients and users:
uaac target http://uaa.local.pcfdev.io
//admin secret defined in /var/vcap/jobs/uaa/config/uaa.yml
uaac token client get admin # admin-client-secret
uaac contexts
uaac client add myappclient --scope openid,scim.read,scim.write --authorized_grant_types client_credentials --authorities oauth.login
uaac client update admin --authorities "uaa.admin clients.secret scim.read"
Further reading on using the UAAC to manage users and clients:
