Bilding an effective identity and access management architecture with Keycloak

Sebastien Blanc, Red Hat

[@marcianoacuerda]

The few attendants to this talk proofs that we think we are better at security than we really are lol. Very good talk. I’m just getting started with Keycloak and I already want to use it in all of my projects. The policy stuff is crazy useful!

[@rajuGT]

At @12:00 you forgot to click save button :(

[@ajit555db]

For getting the avatar url in id jwt token, you needed to 1. Create a new client scope or use existing client scope 2. Map the user attribute (avatar url) to the the selected client scope 3. For the selected client, assign the above client scope as default client scope. 4. Now in the jwt id token, avatar url would appear.

[@derskeal4240]

He forgot to save when he created the User Attribute for avatar.

[@raisanjmr]

hi bro i am new to keycloak and i am bit confused about the concepts can we connect

[@gustavoteixeira8806]

Great talk about Keycloak! Thanks!

[@ThePakChina]

Amazinnggg.Devoxx always bring very interesting topics.Thank you devoxx.

[@rtyx]

Pure gold @28:00

[@fernandobaroni1497]

Great video, good explanations!!

[@inclinedscorpio]

Great Session. Thanks for this !

[@rbelatamas]

great explanation! Thank you so much ❤

[@YogendraTamang]

super useful video.

[@bomkarram]

Great Talk

[@mb.prathamesh]

Informative Session!

[@quangtruongnguyen9481]

I think Policy Enforcement Point call keycloak server(with grant_type=uma-ticket) every time request to check if it is acceptable or not

[@stefanhuber9095]

To make the avatar picture visible you forgot to Save the attribute at minute 12:04

[@stefanholtker3944]

Thank you for this nice Presentation. May i ask what OS and Terminal u use?

[@nec1211986]

he's using Mac for sure

[@christiancarpinelli]

@@nec1211986 That's RHEL (Red Hat Enterprise Linux)

[@estanislaumarques4669]

@@nec1211986 No no!!!

[@yag359]

Just so I understand - by following this demo I would need to update all of the UI pages contained in Keycloak so that I can get my application's look and feel - correct? Does that mean I essentially need to maintain 2 sets of code (i.e. my application ui code and the keycloak ui code)? And consequently potentially coordinate my application deployments with re-deployment of Keycloak?

[@nebeade]

49:50 no you can use REST to do that with your own app

[@PabloPazosGutierrez]

I believe the keycloak customization stuff should be done once, though it might change from app to app, so on that area I guess it will need some customization per-app, but it's still just the GUI, not the whole logic, which might be a bunch of code more than just the GUI.

[@user-hz3bn2jm5o]

does anyone have keycloak hardening guide?

[@JUNO2206]

Two factor 🙂

[@mackyin]

Thanks,do we have this code in github?

[@amazinggracechoirkabugaoff7176]

what should i do if i want to login and get such response of {access_token, id_token, refresh_token} but also I want to add new object in this response ?

[@FuzzPiAndFacial]

Is it possible the something with oauth

[@MrGaryC-1]

The demo is good but the text on the screen is SOOO BLURRY I cant read what he is doing. I need to audio just so he can give the play by play.

[@devsmart8104]

Case with avatar is like stend up

[@AndersJackson]

(Title is spelled wrong on the video)

[@QuangNguyen-ed5sk]

I love Keycloak but please rewrite it in Golang :) I can not see that Keycloak is eating about 450MB Ram in IDLE by comparing with 20MB of a service in Go.

[@FranciscoMoura-paco]

From Keycloak 17.x, it was built using Quarkus, with low memory usage and fast start up.

[@johnnybegood8531]

You could consider zitadel if you want something written in go.

[@bltzbrg]

"Bilding"?

[@MotownGuitarJoe]

My first thought too, but then I realized that English is his second language. Cut the dude a break. I'm guessing his English is WAY better than either of our second languages.

[@bltzbrg]

@@MotownGuitarJoe My second language should be almost on a similar level but my 3rd not. I think this account here just stole the video and fucked up the title :D

[@franklinperez1988]

Great talk about Keycloak! Thanks!