Getting Started With Keycloak Identity Provider (free Identity Server alternative)

[@MilanJovanovicTech]

Want to master Clean Architecture? Go here: bit.ly/3PupkOJ Want to unlock Modular Monoliths? Go here: bit.ly/3SXlzSt

[@necromancer151]

As usual when observer some tools you can also provide few referecne to alternatives at the end. PS i remebr that keycloak have some limitations where you need to code own interceptor/provider

[@MB-Kajtech]

Great start to the series! For those wondering Keycloak is pretty widely used in government agencies for example CERN (nuclear research) and bunch of companies too.

[@MilanJovanovicTech]

I wasn't aware of that, but that's great to know 😁

[@Stoney_Eagle]

It's such a lovely thing to own your user profiles, being able to create tokens for any user or impersonate users opens many doors that cloud solutions keep closed.

[@MilanJovanovicTech]

A user impersonation video might be interesting, thanks for the idea

[@georgeritchie4497]

Finally!!! I waited for it, thank you very much! I'm really looking forward to the continuation, especially how to customize the user registration process by adding event publishing and setting user role by some user inputs

[@MilanJovanovicTech]

You're welcome 😊 I'm still planning what to cover next, so thanks for some ideas.

[@coding-in]

​@@MilanJovanovicTechhow to setup different user access/role , has different menu? Then different access control even in same page.

[@romualdojunior2121]

Already using it in my projects with .NET 8. Great product!

[@MilanJovanovicTech]

It's nice

[@dotnetMasterCSharp]

Is it possible to connect to this via postgres? Help me!

[@delphiguy23]

Great and informative as always Milan. Im exploring this atm and this seems to be a good alternative to spinning up my own identity server. And the best thing about this is that I can self host this.

[@MilanJovanovicTech]

Releasing another video soon for the .NET auth integration

[@itirush2701]

I'm your Russian fan. you make the best content. Люблю тебя ❤

[@MilanJovanovicTech]

Большой привет из Сербии! :)

[@itirush2701]

@@MilanJovanovicTech Ахахахахаха знаешь русский) Когда видео на русском ? :)

[@chizuru1999]

This was what I needed. I just setup identity server on a new project. But if this is better for me then I will redo it with keycloak 😊

[@MilanJovanovicTech]

Awesome, glad I could help! :)

[@shuvo9131]

Nice one Milan. Eagerly waiting for the next video of this series.

[@MilanJovanovicTech]

Thanks a ton

[@tomek120k]

Great video! I needed a quick introduction to Keycloak, thank you :)

[@MilanJovanovicTech]

Glad it helped!

[@robadobdob]

The number of times you drop a video on a topic I'm looking at is uncanny.

[@MilanJovanovicTech]

That's a good sign 😁

[@rickjarr]

Awesome video! Hopefully we get a continuation video soon :)

[@MilanJovanovicTech]

Very soon!

[@jiM3op]

i need to check this out... looking awesome

[@MilanJovanovicTech]

It's pretty cool. Easy to setup. You can connect it to an existing DB like Postgres, etc.

[@kalyangupta]

Wasn't aware of Keycloak . I mostly used okta . Good to know

[@MilanJovanovicTech]

This is like a free version where you manage everything

[@feinirl]

Great video! Can't wait for more Keycloak related videos ;)

[@MilanJovanovicTech]

More to come!

[@joehernandez3231]

Great video! Looking forward to more videos on Keycloak.

[@MilanJovanovicTech]

Coming soon!

[@sudidav]

Thanks for that nice intro. Waiting for the next part.

[@MilanJovanovicTech]

Coming soon!

[@ScrotoTBaggins]

My employer is allergic to Java so we're stuck with Duende, but I really like how keycloak offers a UI right off the bat

[@MilanJovanovicTech]

If you treat it like a "black box", does it matter? 🤔

[@ScrotoTBaggins]

@@MilanJovanovicTechNo, it wouldn't -- had my predecessors avoided implementing wacky customizations to identityserver4, which needed to be ported to Duende in order to limit risk as idsvr4 and Duende have official version upgrade docs. But you're 100% right. A typical (and more secure) system using KeyCloak can be used, deployed, managed, etc. without ever needing to see a single line of Java.

[@DrachirLerom]

Thanks, good quality video

[@MilanJovanovicTech]

You're welcome

[@fluidityinmotion2452]

Excellent tutorial!

[@MilanJovanovicTech]

Thank you!

[@borislavnikolov1078]

Very well explained!

[@MilanJovanovicTech]

Thanks a lot! :)

[@akashkarve1991]

Nice informative video. Eagerly waiting for the series. I assume it will cover common scenarios for microservices like service to service communication with valid resource scopes and way to manage them. Appreciate your efforts !!!!

[@MilanJovanovicTech]

I might introduce it into a microservices scenario at some point, for now I want to focus on integrating it with a .NET app

[@IVANLUISLG]

Good information. Thanks for this 🙏 🙌 👍 👏😊

[@MilanJovanovicTech]

Sure thing!

[@vinydanylo]

Nice! I just find it their documentation very confusing when running a production ready docker container =/

[@MilanJovanovicTech]

You and me both!

[@RadhikaJangam-ee8rl]

very well explained.....Thank you 😊

[@MilanJovanovicTech]

Most welcome 😊

[@zachsalt1209]

Great video!

[@MilanJovanovicTech]

Thanks!

[@sunzhang-d9v]

Can you explain the framework of ABP, and explain the advantages and disadvantages?

[@MilanJovanovicTech]

Will consider

[@Flanno91]

Great video Milan. Would love to see the backend configuration for this on a NET Core Web API!

[@MilanJovanovicTech]

Working on that video tomorrow, and posting in a week or two!

[@maradasa985]

Hi Milan, at 10:32 you had an error in postman, I have the same error, what could it be?

[@MilanJovanovicTech]

Email typo 😂

[@maradasa985]

@@MilanJovanovicTech Yeah, I think mine was typo on redirect

[@sreerajpsin]

@MilanJovanovicTech how we can achive if we have two realm and single api for auth ? Say each relam for each tenant ? Is it even possible ?

[@MilanJovanovicTech]

@@sreerajpsin Yes, you would define separate authentication schemes. This is actually a great idea for a video.

[@sreerajpsin]

@@MilanJovanovicTech waiting

[@rpreviato]

Hi Milan, I'm trying to configure keycloak to run directly on the host machine with nginx and Cloudflare. Do you have any tips? I've been trying to get this working for days with no success.

[@MilanJovanovicTech]

My best tip is to keep trying. 😅 You're probably missing some ENV vars that makes this work behind a reverse proxy.

[@rahulgupta4234]

So the docker image that is running now in local, will have to be hosted on a server like EC2 and then we can use it in Live application?

[@MilanJovanovicTech]

Yes

[@rahulgupta4234]

@MilanJovanovicTech thanks.

[@dRoseaK]

Hey Milan, appreciate the great video. For some reason when i run the test on the KC test page, I get a "localhost" refused to connect" error. I followed all your steps in the video except my for my own local domain name

[@dRoseaK]

What am I doing wrong?

[@MilanJovanovicTech]

I have no idea, mate :)

[@myschool1361]

part -2 is awaited

[@MilanJovanovicTech]

Next week :)

[@kaanakyuz5801]

Is there a way to put role attributes in jwt? I am currently doing this with java spring.

[@MilanJovanovicTech]

Roles from Keycloak directly?

[@kaanakyuz5801]

@@MilanJovanovicTech yes there is role information in jwt but i can't get the attributes of the roles is there a way to get this

[@aryanrana-o6n]

Can you tell me that when i click on Sign in button at 7:40 then new page open as "Unable to connect"

[@MilanJovanovicTech]

Most likely the redirect URIs aren't properly set (on the client)

[@ehichioyaidiakhoa3746]

hows does docker perform on windows. i'm assuming thats where it was installed in this tutorial?

[@MilanJovanovicTech]

Yes. Docker Deskopt running in WSL (Linux)

[@_Funtime60]

Doesn't the keycloak documentation SPECIFICALLY state NOT to use dev mode in production? Also how do you run it with a more permanent setup in docker-compose?

[@MilanJovanovicTech]

We aren't running this in production

[@aldinoauliaaurunisbi4712]

Sir, have u ever faced that page keep refreshing after login? Could you please help me.. first login works normally , but not after all..

[@MilanJovanovicTech]

No, haven't seen that one

[@nathangrosvenor7661]

What would you personally recommend for identity for an enterprise level application out of Keycloak, auth0, azure ad, aws cognito or creating a custom JWT based solution

[@MilanJovanovicTech]

Pick any of those (Keycloak, auth0, azure ad, aws cognito), but I wouldn't recommend rolling your own

[@Emi-fg7fn]

and how do you integrate it with the authorization?

[@MilanJovanovicTech]

Coming in another video!

[@flobuilds]

We use keycloak too in our project

[@MilanJovanovicTech]

Nice!

[@Santalucesguy]

Wow I need this for a proyect I’m in. Any idea of a course I could watch??

[@MilanJovanovicTech]

I'm not aware of one 🤷‍♂️

[@rebeccaacheampong7239]

Can this be used with a VR application?

[@MilanJovanovicTech]

No idea, I never built one

[@barefeg]

Does it support api key authentication? Meaning users can create api keys for programmatic usage of API resources protected under keycloak

[@MilanJovanovicTech]

Not directly. One approach I can think of is creating a dedicated (confidential) client for each user, and they'd be able to exchange it for an access token

[@barefeg]

Maybe creating a new Authenticator and adding the record to the db directly is the only elegant way. I need to dig a bit into the keycloak interfaces I think it should be possible, but it’s a major effort

[@MrPayTune]

I really want to start using Keycloak. But is it possible to style the login, register etc. Or must I create custom screens that call the keycloak api? And if so is this a good idea?

[@MilanJovanovicTech]

Yes, but you need a UI dev to do it

[@otisrancko]

Hey Milan, Nice video...I wanted to ask how can i programmatically signup and login from a web application using KeyCloak's API?

[@MilanJovanovicTech]

You can use the Keycloak REST API to get a password (Password flow), and same for registering. I'll do a video about it.

[@otisrancko]

@@MilanJovanovicTech Thanks! That will be awesome

[@PelFox]

What if you store users and hashed passwords elsewhere? We're looking for alternatives to IDP but we need to be able to manage users outside of the service. KeyCloak like it has a lot of user management built in. I guess that if you want to customize you need to write Java...

[@MilanJovanovicTech]

There's a simple REST API for managing users in Keycloak. Might be all you need?

[@fabiojansen4286]

Is possible to implement multi tenant with keycloak?

[@MilanJovanovicTech]

Yes

[@MahmoudHassan-m2t]

waiting for the next keyclock video

[@MilanJovanovicTech]

Recorded, comes out in a few weeks :)

[@MahmoudHassan-m2t]

@@MilanJovanovicTech thanks for your great effort

[@zfold4702]

Wait... security responsibility on a opensource tool?

[@MilanJovanovicTech]

Yes

[@Emi-fg7fn]

And why not?

[@brianmorin5547]

Great stuff. How about Part 2 on deploying to a cloud server with Nginx reverse proxy and SSL to support all our apps?

[@MilanJovanovicTech]

That might be part 3, since I already recorded part 2

[@brianmorin5547]

@@MilanJovanovicTech Ha, nice! I went to your channel for part 2. Not uploaded yet?

[@samislam2746]

Are you from Slovakia?

[@MilanJovanovicTech]

Serbia

[@mysuperemecy]

If you can show how to enable user registration then it will be great 😃

[@MilanJovanovicTech]

Will do, thanks for bringing that up!

[@dev.repolho]

Thanks for this serie bro !! Was starting to check Ory ecosystem, I like the ideia of ory oathkeeper for centralized authorization server, so we can achieve the same here with Authorization Services Keycloak ? Like a reverse proxy for authorization. Also does anyone use ory? I started to check it, but did not do a real comparison between Ory and Keaclock (I need a service to deploy on my infra and that supports AD/LDAP federation)

[@MilanJovanovicTech]

I never heard of Ory 🤷‍♂️

[@paulmdevenney]

damn...I wish I'd seen this video 1 year ago. Regretting my cloud provider choice.

[@MilanJovanovicTech]

I wish I'd released it a year ago then 😅

[@PhuNguyen-bi7pi]

It's a bummer that IdentityServer is now a commercial product :(. Keycloak is great, but it's Java

[@MilanJovanovicTech]

So what if it's Java?

[@davor12]

to brate srbija!

[@MilanJovanovicTech]

Samo jako 💪

[@ote8458]

please if you make such videos also explain how does keycloak make money from using it as identity provider. Real developers would use Keycloak Provider in real world scenarios.

[@MilanJovanovicTech]

How it makes money? It doesn't.

[@aakashpoojary3968]

​@@MilanJovanovicTechso the possibility of keyclock getting deprecated?

[@MB-Kajtech]

@@aakashpoojary3968 No not really, it's in government use + Linux Foundation + Red Hat (Red Hat Single Sign-On is based on KeyCloak).