Live data from Hacker News

Keycloak: Open-Source Identity and Access Management

keycloak.org

181–190 of 243 posts

Re: Keycloak: Open-Source Identity and Access Management

#181

Earlier quoted context omitted.

Sounds like you would be interested in v2 ( https://zitadel.ch/v2 ) as in it will be provided as single binary, which you should be able to use in our homelab setup. There are a lot of other improvements, but if that's the only dealbreaker, v2 should take care of it.

Apache 2.0 and golang. Thank you! That’s exactly what I was looking for. I’ll check out v2 asap.

Thank you, v2 will be ready in the next 2-4 weeks. We are already running it internally ;-)

Re: Keycloak: Open-Source Identity and Access Management

#182

Earlier quoted context omitted.

Sounds like you would be interested in v2 ( https://zitadel.ch/v2 ) as in it will be provided as single binary, which you should be able to use in our homelab setup. There are a lot of other improvements, but if that's the only dealbreaker, v2 should take care of it.

Wow I was not expecting that! Usually offering only a Kubernetes version is the new way to force small users to the SaaS version.

True, we think that for most setups and early explorations K8s is too much of a beast. TBH we are in the process of switching our cloud from K8s to Cloud Run which is kind of close to Knative but without the ops hustle ;-)

Re: Keycloak: Open-Source Identity and Access Management

#183

Earlier quoted context omitted.

Sounds like you would be interested in v2 ( https://zitadel.ch/v2 ) as in it will be provided as single binary, which you should be able to use in our homelab setup. There are a lot of other improvements, but if that's the only dealbreaker, v2 should take care of it.

Yep, that's the only dealbreaker for me - I'll keep an eye out for v2!

Love it, we will definitely create a post here in the next 2-4 weeks.

Re: Keycloak: Open-Source Identity and Access Management

#184

Earlier quoted context omitted.

We're actually working on a new version of the Administration UI at the moment (I'm one of the devs) so this is useful feedback. We're looking for folks to try it out, so take a look at https://github.com/keycloak/keycloak-admin-ui/ . You can try it out on the latest Keycloak by passing the --features=admin2 flag on startup.

We have way too many issues with KeyCloak. Sometimes I wonder why did we integrate this. One of the main issue is when you authorize by Github but cancel the authentication, it redirects to KeyCloak page rather than our login page. Couldn't find any solution yet.

isnt it open source?

Re: Keycloak: Open-Source Identity and Access Management

#185

This part of the IAM space (SSO and AuthN) is so crowded with products, both paid and open source. When you look at governance, certification, lifecycle management, approvals, etc. there is almost nothing by comparison. A couple not so great commercial products and very little open source. Hopefully that changes.

Agreed, I mean that's why we built our solution completely open source in an open saas model and certified [1] our solution. We even provide our pentest results publicly, after mitigation of course [2].

The value we provide, when you are using our cloud, is the operational peace of mind, global scalability with data residency and access to deep technological knowledge.

We wrote some word about that in our blog [3] as well.

1. https://zitadel.ch/blog/openid-connect-certification

2. https://zitadel.ch/blog/pentest-results-h1-2021

3. https://zitadel.ch/blog/saas-vs-self-hosted

Re: Keycloak: Open-Source Identity and Access Management

#186
Is there a minimal config to run and setup keycloak with docker for local development? Most sources suggest exporting and reusing a reale-export.json, but it is missing the user datas and includes lots of (default) options and random uuids. There is a example repo, but it seems out of date and missing some settings: https://github.com/keycloak/keycloak-demo/blob/master/demo-r...

Re: Keycloak: Open-Source Identity and Access Management

#187
post #96

In Keycloak nothing made sense to me until I got myself familiar with OAuth 2.0 and OpenID Connect. Keycloaks documentation seems vast, but isn't. There is also no way to search inside their documentation. It's a pity. A better documentation is contained in the administration web ui itself. There are so many "hints" and tooltips for almost every option there is. It really helped me a lot. Keycloak is good software. I…

Can you disclose the number of users & apps you have? Are you using Keycloak or do you pay for Red Hat Single Sign-On (for context, that's the name of the downstream product that Red Hat sell subscriptions for).

The downside to using Red Hat Single Sign-On is that it is a vastly inferior product to using Keycloak upstream as it is so many versions behind.

This means that bug fixes and features haven't trickled down yet. Although RH SSO 7.5 jumped from Keycloak version 9.0.17 (in RH SSO 7.4) to 15.0.2 so there's some improvement there... but Keycloak just released 18.0.0...

Re: Keycloak: Open-Source Identity and Access Management

#188
post #183

Earlier quoted context omitted.

Yep, that's the only dealbreaker for me - I'll keep an eye out for v2!

Love it, we will definitely create a post here in the next 2-4 weeks.

Your v2 pricing model is lame. I was literally pulling out my credit card when I saw the original pricing.

Re: Keycloak: Open-Source Identity and Access Management

#189

In Keycloak nothing made sense to me until I got myself familiar with OAuth 2.0 and OpenID Connect. Keycloaks documentation seems vast, but isn't. There is also no way to search inside their documentation. It's a pity. A better documentation is contained in the administration web ui itself. There are so many "hints" and tooltips for almost every option there is. It really helped me a lot. Keycloak is good software. I…

For the most part I am also happy with Keycloak, but they could do a far better job documenting things, especially their language adapters. For example the "Readme" for the `keycloak-connect` Node.js package has a link to documentation, but that documentation fails to document anything around the package.

Likewise I had better luck once I understood OpenID and then treating Keycloak as an extension of that. I even ended up writing my own code to deal with the bearer token passed to our API, because I couldn't find anything. If anyone is interested I can share it, but it isn't anything amazing.

Most of my best help came from outside of the Keycloak support groups and instead reaching out to other people who use Keycloak.

Re: Keycloak: Open-Source Identity and Access Management

#190

In Keycloak nothing made sense to me until I got myself familiar with OAuth 2.0 and OpenID Connect. Keycloaks documentation seems vast, but isn't. There is also no way to search inside their documentation. It's a pity. A better documentation is contained in the administration web ui itself. There are so many "hints" and tooltips for almost every option there is. It really helped me a lot. Keycloak is good software. I…

We're actually working on a new version of the Administration UI at the moment (I'm one of the devs) so this is useful feedback. We're looking for folks to try it out, so take a look at https://github.com/keycloak/keycloak-admin-ui/ . You can try it out on the latest Keycloak by passing the --features=admin2 flag on startup.

Will this have an impact on the auth screens and the related theming?
Post reply on HN