Getting Started With Keycloak Identity Provider (free Identity Server alternative)

[@MilanJovanovicTech]

Want to master Clean Architecture? Go here: bit.ly/3PupkOJ Want to unlock Modular Monoliths? Go here: bit.ly/3SXlzSt

[@necromancer151]

As usual when observer some tools you can also provide few referecne to alternatives at the end. PS i remebr that keycloak have some limitations where you need to code own interceptor/provider

[@MB-Kajtech]

Great start to the series! For those wondering Keycloak is pretty widely used in government agencies for example CERN (nuclear research) and bunch of companies too.

[@MilanJovanovicTech]

I wasn't aware of that, but that's great to know 😁

[@Stoney_Eagle]

It's such a lovely thing to own your user profiles, being able to create tokens for any user or impersonate users opens many doors that cloud solutions keep closed.

[@MilanJovanovicTech]

A user impersonation video might be interesting, thanks for the idea

[@georgeritchie4497]

Finally!!! I waited for it, thank you very much! I'm really looking forward to the continuation, especially how to customize the user registration process by adding event publishing and setting user role by some user inputs

[@MilanJovanovicTech]

You're welcome 😊 I'm still planning what to cover next, so thanks for some ideas.

[@coding-in]

​@@MilanJovanovicTechhow to setup different user access/role , has different menu? Then different access control even in same page.

[@delphiguy23]

Great and informative as always Milan. Im exploring this atm and this seems to be a good alternative to spinning up my own identity server. And the best thing about this is that I can self host this.

[@MilanJovanovicTech]

Releasing another video soon for the .NET auth integration

[@chizuru1999]

This was what I needed. I just setup identity server on a new project. But if this is better for me then I will redo it with keycloak 😊

[@MilanJovanovicTech]

Awesome, glad I could help! :)

[@romualdojunior2121]

Already using it in my projects with .NET 8. Great product!

[@MilanJovanovicTech]

It's nice

[@dotnetMasterCSharp]

Is it possible to connect to this via postgres? Help me!

[@shuvo9131]

Nice one Milan. Eagerly waiting for the next video of this series.

[@MilanJovanovicTech]

Thanks a ton

[@jiM3op]

i need to check this out... looking awesome

[@MilanJovanovicTech]

It's pretty cool. Easy to setup. You can connect it to an existing DB like Postgres, etc.

[@rickjarr]

Awesome video! Hopefully we get a continuation video soon :)

[@MilanJovanovicTech]

Very soon!

[@robadobdob]

The number of times you drop a video on a topic I'm looking at is uncanny.

[@MilanJovanovicTech]

That's a good sign 😁

[@akashkarve1991]

Nice informative video. Eagerly waiting for the series. I assume it will cover common scenarios for microservices like service to service communication with valid resource scopes and way to manage them. Appreciate your efforts !!!!

[@MilanJovanovicTech]

I might introduce it into a microservices scenario at some point, for now I want to focus on integrating it with a .NET app

[@itirush2701]

I'm your Russian fan. you make the best content. Люблю тебя ❤

[@MilanJovanovicTech]

Большой привет из Сербии! :)

[@itirush2701]

@@MilanJovanovicTech Ахахахахаха знаешь русский) Когда видео на русском ? :)

[@sudidav]

Thanks for that nice intro. Waiting for the next part.

[@MilanJovanovicTech]

Coming soon!

[@fluidityinmotion2452]

Excellent tutorial!

[@MilanJovanovicTech]

Thank you!

[@feinirl]

Great video! Can't wait for more Keycloak related videos ;)

[@MilanJovanovicTech]

More to come!

[@borislavnikolov1078]

Very well explained!

[@MilanJovanovicTech]

Thanks a lot! :)

[@joehernandez3231]

Great video! Looking forward to more videos on Keycloak.

[@MilanJovanovicTech]

Coming soon!

[@ScrotoTBaggins]

My employer is allergic to Java so we're stuck with Duende, but I really like how keycloak offers a UI right off the bat

[@MilanJovanovicTech]

If you treat it like a "black box", does it matter? 🤔

[@ScrotoTBaggins]

@@MilanJovanovicTechNo, it wouldn't -- had my predecessors avoided implementing wacky customizations to identityserver4, which needed to be ported to Duende in order to limit risk as idsvr4 and Duende have official version upgrade docs. But you're 100% right. A typical (and more secure) system using KeyCloak can be used, deployed, managed, etc. without ever needing to see a single line of Java.

[@RadhikaJangam-ee8rl]

very well explained.....Thank you 😊

[@MilanJovanovicTech]

Most welcome 😊

[@Flanno91]

Great video Milan. Would love to see the backend configuration for this on a NET Core Web API!

[@MilanJovanovicTech]

Working on that video tomorrow, and posting in a week or two!

[@zachsalt1209]

Great video!

[@MilanJovanovicTech]

Thanks!

[@sunzhang-d9v]

Can you explain the framework of ABP, and explain the advantages and disadvantages?

[@MilanJovanovicTech]

Will consider

[@vinydanylo]

Nice! I just find it their documentation very confusing when running a production ready docker container =/

[@MilanJovanovicTech]

You and me both!

[@myschool1361]

part -2 is awaited

[@MilanJovanovicTech]

Next week :)

[@flobuilds]

We use keycloak too in our project

[@MilanJovanovicTech]

Nice!

[@brianmorin5547]

Great stuff. How about Part 2 on deploying to a cloud server with Nginx reverse proxy and SSL to support all our apps?

[@MilanJovanovicTech]

That might be part 3, since I already recorded part 2

[@brianmorin5547]

@@MilanJovanovicTech Ha, nice! I went to your channel for part 2. Not uploaded yet?

[@mysuperemecy]

If you can show how to enable user registration then it will be great 😃

[@MilanJovanovicTech]

Will do, thanks for bringing that up!

[@Santalucesguy]

Wow I need this for a proyect I’m in. Any idea of a course I could watch??

[@MilanJovanovicTech]

I'm not aware of one 🤷‍♂️

[@nathangrosvenor7661]

What would you personally recommend for identity for an enterprise level application out of Keycloak, auth0, azure ad, aws cognito or creating a custom JWT based solution

[@MilanJovanovicTech]

Pick any of those (Keycloak, auth0, azure ad, aws cognito), but I wouldn't recommend rolling your own

[@MrPayTune]

I really want to start using Keycloak. But is it possible to style the login, register etc. Or must I create custom screens that call the keycloak api? And if so is this a good idea?

[@MilanJovanovicTech]

Yes, but you need a UI dev to do it

[@otisrancko]

Hey Milan, Nice video...I wanted to ask how can i programmatically signup and login from a web application using KeyCloak's API?

[@MilanJovanovicTech]

You can use the Keycloak REST API to get a password (Password flow), and same for registering. I'll do a video about it.

[@otisrancko]

@@MilanJovanovicTech Thanks! That will be awesome

[@ehichioyaidiakhoa3746]

hows does docker perform on windows. i'm assuming thats where it was installed in this tutorial?

[@MilanJovanovicTech]

Yes. Docker Deskopt running in WSL (Linux)

[@sreerajpsin]

@MilanJovanovicTech how we can achive if we have two realm and single api for auth ? Say each relam for each tenant ? Is it even possible ?

[@MilanJovanovicTech]

@@sreerajpsin Yes, you would define separate authentication schemes. This is actually a great idea for a video.

[@sreerajpsin]

@@MilanJovanovicTech waiting

[@MahmoudHassan-m2t]

waiting for the next keyclock video

[@MilanJovanovicTech]

Recorded, comes out in a few weeks :)

[@MahmoudHassan-m2t]

@@MilanJovanovicTech thanks for your great effort

[@PelFox]

What if you store users and hashed passwords elsewhere? We're looking for alternatives to IDP but we need to be able to manage users outside of the service. KeyCloak like it has a lot of user management built in. I guess that if you want to customize you need to write Java...

[@MilanJovanovicTech]

There's a simple REST API for managing users in Keycloak. Might be all you need?

[@zfold4702]

Wait... security responsibility on a opensource tool?

[@MilanJovanovicTech]

Yes

[@Emi-fg7fn]

And why not?

[@barefeg]

Does it support api key authentication? Meaning users can create api keys for programmatic usage of API resources protected under keycloak

[@MilanJovanovicTech]

Not directly. One approach I can think of is creating a dedicated (confidential) client for each user, and they'd be able to exchange it for an access token

[@barefeg]

Maybe creating a new Authenticator and adding the record to the db directly is the only elegant way. I need to dig a bit into the keycloak interfaces I think it should be possible, but it’s a major effort

[@rebeccaacheampong7239]

Can this be used with a VR application?

[@MilanJovanovicTech]

No idea, I never built one

[@aryanrana-o6n]

Can you tell me that when i click on Sign in button at 7:40 then new page open as "Unable to connect"

[@MilanJovanovicTech]

Most likely the redirect URIs aren't properly set (on the client)

[@Emi-fg7fn]

and how do you integrate it with the authorization?

[@MilanJovanovicTech]

Coming in another video!

[@samislam2746]

Are you from Slovakia?

[@MilanJovanovicTech]

Serbia

[@fabiojansen4286]

Is possible to implement multi tenant with keycloak?

[@MilanJovanovicTech]

Yes

[@dev.repolho]

Thanks for this serie bro !! Was starting to check Ory ecosystem, I like the ideia of ory oathkeeper for centralized authorization server, so we can achieve the same here with Authorization Services Keycloak ? Like a reverse proxy for authorization. Also does anyone use ory? I started to check it, but did not do a real comparison between Ory and Keaclock (I need a service to deploy on my infra and that supports AD/LDAP federation)

[@MilanJovanovicTech]

I never heard of Ory 🤷‍♂️

[@PhuNguyen-bi7pi]

It's a bummer that IdentityServer is now a commercial product :(. Keycloak is great, but it's Java

[@MilanJovanovicTech]

So what if it's Java?

[@paulmdevenney]

damn...I wish I'd seen this video 1 year ago. Regretting my cloud provider choice.

[@MilanJovanovicTech]

I wish I'd released it a year ago then 😅

[@ote8458]

please if you make such videos also explain how does keycloak make money from using it as identity provider. Real developers would use Keycloak Provider in real world scenarios.

[@MilanJovanovicTech]

How it makes money? It doesn't.

[@aakashpoojary3968]

​@@MilanJovanovicTechso the possibility of keyclock getting deprecated?

[@MB-Kajtech]

@@aakashpoojary3968 No not really, it's in government use + Linux Foundation + Red Hat (Red Hat Single Sign-On is based on KeyCloak).