Keycloak

wikipedia:Keycloak (2014) is an open source software product to allow single sign-on with Identity Management and Access Management.

• https://www.keycloak.org/

• Realms, roles
• Requires an external DB
• Keycloak TLS
• Keycloak as an OIDC Client

Installation

helm install keycloak
helm status keycloak -n keycloak

brew install keycloak (Not available)

docker run -p 8080:8080 -e KEYCLOAK_ADMIN=admin -e KEYCLOAK_ADMIN_PASSWORD=admin quay.io/keycloak/keycloak:latest start-dev

kcadm.sh

Features

• Support to connect to existing LDAP or Active Directory servers
• OpenID Connect, OAuth 2.0 and SAML support

• ACCOUNT_API
• ACCOUNT_V3
• ADMIN_API
• ADMIN_V2
• AUTHORIZATION
• CIBA
• CLIENT_POLICIES
• DEVICE_FLOW
• HOSTNAME_V2
• IMPERSONATION
• KERBEROS
• LOGIN_V2
• OPENTELEMETRY
• ORGANIZATION
• PAR
• PERSISTENT_USER_SESSIONS
• STEP_UP_AUTHENTICATION
• WEB_AUTHN

Activities

• Keycloak and Okta Integration: Complete Developer Guide
• Keycloak as an OIDC Client

Errors

Non-secure context detected; cookies are not secured, and will not be available in cross-origin POST requests

Related terms

• Red Hat Single Sign-On
• FreeIPA
• Red Hat Identity Manager
• JBoss
• Rocket.Chat https://docs.rocket.chat/guides/administrator-guides/authentication/oauth/keycloak
• Authentik
• Java
• Keycloak logs
• .jks
• PingFederate
• Wildfly
• Service Provider Interfaces (SPIs)

See also

• Keycloak, kc_admin, kc.sh [ export | import ], Keycloak logs, realm, roles, Mapping claims and assertions, Terraform Keycloak provider, helm install keycloak, JVM metrics, Keycloak Import, Interface IdentityProviderMapper, KC_HOSTNAME_STRICT_HTTPS, Variables, KC troubleshooting, versions, client_id, Keycloak TLS