Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Keycloak: Open-source identity and access management

keycloak.org

Post reply on HN
Print view View original

71–80 of 124 posts

Re: Keycloak: Open-source identity and access management

#71

Post by tofflos »

cybrix12 wrote: post #43
snuxoll wrote: post #10

Earlier quoted context omitted.

It’s highly integrated with Wildfly (or JBoss EAP for the commercial product), so if you’re not deploying it with the Docker images expect to have fun dealing with the special hell that is Java application servers - setting up infispan and configuring the database in JNDI at a minimum will require some moderate reading. If you do use the Docker images it’s pretty straightforward though. Past that, customization could…

It looks like Quarkus is going to be considered for one of the next major release [1]. That said, do you believe it will still be possible to extend Keycloak using the deployment-scanner? Also, do you happen to have open-source code related to Keycloak and/or custom extensions? Beside the poor doc, finding more open-source code is one of the best way to learn this. [1]: https://issues.redhat.com/browse/KEYCLOAK-13068…

Some more scraps of information regarding Keycloak on Quarkus is available at https://www.keycloak.org/2019/10/keycloak-x.

I'm hoping this will lead to significantly faster startup times so that my integration tests will run faster.

Re: Keycloak: Open-source identity and access management

#72

Post by joe200 »

Can keycloak let me integrate different k8s clusters running in Azure/Google/AWS with i.e.: Azure AD ? All our users have accounts in Azure AD but we would like to let them use k8s clusters running in different cloud providers without maintaining user accounts there. Is it possible with keycloak ?

Re: Keycloak: Open-source identity and access management

#73

Post by tofflos »

deathtrader666 wrote: post #67

Could someone please ELI-5 what Keycloak is, and how it fits in a SaaS app?

Keycloak is an authentication portal that sits in front of other applications thereby freeing those applications from the burden of implementing login forms and secure password storage.

Re: Keycloak: Open-source identity and access management

#74

Post by tofflos »

tofflos wrote: post #73
deathtrader666 wrote: post #67

Could someone please ELI-5 what Keycloak is, and how it fits in a SaaS app?

Keycloak is an authentication portal that sits in front of other applications thereby freeing those applications from the burden of implementing login forms and secure password storage.

Regarding a SaaS application. Let's say you're a SaaS provider and you're selling your service to a big organization. In addition to providing login forms Keycloak also implements the SAML and OpenID Connect standards which means that employees of the big organization can be single signed on from their office computers.

Re: Keycloak: Open-source identity and access management

#76

Post by nickik »

jgrodziski wrote: post #26

Keycloak is a great piece of engineering. It's a robust IAM, fully-featured, easy to deploy and integrate with. My opinion is that people should rely on battle-tested 3rd party solution like Keycloak for their authentication and authorization needs. We run it in production on GCP and it integrates nicely with the Clojure ecosystem (both on the frontend with a SPA and on the backend dealing with REST API security). Sh…

Oh interesting, I have been wanting to do something with it and Clojure.

Re: Keycloak: Open-source identity and access management

#78

Post by tialaramex »

closeparen wrote: post #31
realdavidops wrote: post #20

Earlier quoted context omitted.

Hmm. I'm not sure what you mean. Users by default can use the console to update their 2FA credentials. The only time I have to intervene is when they lose their 2FA as it doesn't really do backup codes. We do require 2FA as a part of our login flows so this is something we're using heavily.

It may be better for TOTP; I was looking at U2F and WebAuthn.

What would admin enrollment even look like for WebAuthn? Do I need to FedEx my FIDO security keys to the company IT security department?

I can't imagine any scenario in which you have FIDO keys and admin enrollment and security but I'm prepared to be enlightened.

Post reply on HN