Keycloak is a great tool, but it lacks proper documentation. So we have Realm.roles, Client.roles and User.roles How do there 3 work together when accessing an application using a specific client?

Keycloak offers something called federation which is not THAT different from AD in concept except that federation is a way to solve centralized authentication and authorization over the web. OAuth2/OIDC …

The Keycloak server then sends both the code and tokens to your application. The access token can be used immediately while the code can be exchanged for access and refresh tokens. Similar to the …

Apr 24, 2022 · Keycloak requires an external instance of LDAP and from experience is a royal pain to setup well. I have additional security in front of Authentik minimizing the attack surface (Geo …

Jul 27, 2017 · According to the version 18 release note. Keycloak does not support logout with redirect_uri anymore. you need to include post_logout_redirect_uri and id_token_hint as parameters. …

Oct 16, 2022 · Keycloak Integration Hi all, Looking to try integrating keycloak (or any oidc-compatible IdP at this point) with FreeIPA I have FreeIPA and Keycloak up and running just not sure how to go …

Apr 16, 2018 · Old answer for Keycloak up to 16.1.1 and Keycloak legacy 17+: Publish port 8443 (HTTPS) and use it instead of 8080 (HTTP): docker run \ --name keycloak \ -e …

Aug 17, 2022 · Keycloak of course has the backing of RedHat, and general userbase that makes me trust its use in the long-term, while Authentik is definitely the new kid on the block. But what I found …

Oct 11, 2017 · However, this does not log the user out of Keycloak and hence I was attempting to make a RESTful call to the Keycloak server to logout the user out and then close the Vaadin (Http) Session.

Apr 9, 2020 · Hi, I want to set up SSO with an OpenID provider like keycloak. Sadly, keycloak neither supports yubikey directly nor web authn as at least second factor which is a must for me. So with this …