Keycloak Deep Dive

A walk through of a few features provided by Keycloak and how to use these.

[@andrewlee9508]

0:17 Creating new realm, "demo" 0:40 STMP configuration for "demo" realm 1:23 Creating client for sample application, "JS Console" 1:40 "JS Console" redirects to KeyCloak Login page, but need to configure a user 1:56 Configure realm to enable users to register to "demo" realm 3:07 Token contents - ID token vs Access token 3:43 Adding more content to tokens 4:49 Create Client Scope 7:30 Configure Consent for Client Scope 8:27 Roles 10:07 Groups 11:17 Mapping Group information into the Access token, using "Group Membership", "User Attribute" Protocol Mapper. 12:39 Configuring LDAP as an external store 14:51 Identity brokering feature (GitHub) 17:28 Style & theme configuration 18:24 ID tokens in KeyCloak 19:47 Changing JWT singature algorithm, global or specific to a client 20:52 Changing keys used to sign the tokens, create a new key, deactivate other keys 22:16 Session Management 23:20 Events 24:19 Custom authentication - Magic Link, OTP, etc.

[@ajitsingh4346]

God bless you!!

[@lonelym13]

Doing God's work.

[@mugume]

thank you buddy

[@pedroeuropeu5358]

Amazing videos! Congrats

[@amitkikraft5687]

Good tutorial and video. I got overall idea and usage of KeyCloak. thank you so much

[@sagarshah1983]

Nice Tutorial to get started with KeyCloak! Thank you! One question - When I integrate with GitHib as an external identity provider, does it create the user in keycloak database as well? What specifications are required to be followed if I have to build my own custom identity provider that manages users in my existing external application/system?

[@SushilKumarBhaskar]

excellent one

[@leonidlee]

Hi Stian, could you please share a video or documentation on how to build keycloak brokering to another keycloak instance?

[@terryiskandar7322]

very helpful

[@Jilani97]

Hei Stian ! Du er en legende !! :)

[@ahmednawazkhan2450]

how to add a select list on user registration form? the data of select list must come from an external api

[@rachit2228]

is there any way i can make a user act as admin or a super user who can add/delete other users?

[@2012kostyan]

@Stian Thorgersen How to assign specific role for new user when he is being registered?

[@jonnytheponny5753]

There is an opttion "Default Role". Define your role as Default Role and all new Users will have this role automatically asigned, when created.

[@roztopenysneh]

Andrew, all finished for me on 0:40 as per your example, my smtp setting does not works...I mean with my google credentials...why? I did everything as you are showing.....?

[@sdeep652]

Hi , Can we export realm with groups , roles and users ?

[@AshishKumar-bn1bn]

How can i add admin role to master user , i have deleted from keycloak console

[@ranjitjadhav3551]

How we can assign role to user from angular or java?

[@gauravverma-xs2sl]

awesome video sir....plz make video how to add external mysql database in keycloak plz sir...thank you

[@priyag3601]

Could you please tell me how to set up role attributes in keycloak and that attributes need to get in id token... Thanks in advance...

[@dalu_]

The audio here is better and it seems like this is the only real "how to actually use keycloak" document. The online documentation is pretty rudimentary about installing and securing but no actual "on the spot" how to use. And there you also say something like "oh you can also add this avatar_url as a default attribute which the user can also be asked to provide but I don't have too much time so I'll not tell you how"...

[@kasaiahjasti571]

Hi Stian Thorgersen, Thanks for the video on keycloak. I have tried implement in my local but i am getting "invalid request" page instead of login page. Could you please help why i am facing this issue. Do i need to implement anything in my application.

[@polydungeons7239]

if youre running Keycloak inside Docker, you need to ensure that your keycloak.json config points to there, the demo exposes an 8080 port in localhost, but you cant reach localhost inside a docker container if you are not resolving the name first. But you can also either inspect the docker container using ` docker ps ` to indetify the container id Then ` docker inspect -f '{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' container_name_or_id ` and copy that ip Now just replace the localhost name server in keycloak.json auth url with the container ip and your example should run

[@liyangau]

Is it possible to remove the `/` in front of group name? 12:05 shows the group name as `/mygroup`. How can I only use `mygroup` here?. Thanks

[@user-sl1ek4vd9u]

Helloy, i have some question, maybe you can help me) I want create user via keycloak web console, but after creating account, i want that created users choose the password by themselfs, but i don't know, keycloak have some kind functionality or not? I mean maybe keycloak can send email with link for creating new password or somthing like this) in this case admin don't have to manually create temporary password and in my case it's very convenient)

[@Saswatxp]

How to create customized login screen ??

[@durgeshagrawal4923]

Hi Lee, I need help, i m new for this tool, so how we can implement user login or registration page coul you please help me on that

[@umesh165]

Hi, Could you please tell me what will be the application url. If my client id is "myapp" then i am trying localhost/myapp.But it is givng 404 error on the browser

[@JaniWasTaken]

Can we get your example app?

[@JaniWasTaken]

for future reference: I found it github.com/stianst/devnation-deep-dive

[@09abhishekk]

AMazing Tutorial. Please add X509 authentication! 🙂

[@ignitehub-dev]

Again... skipped how we generate a client auth url...

[@rachit2228]

is there any way i can make a user act as admin or a super user who can add/delete other users?

[@user-ew3tm7td2b]

Maybe you can add a role with admin privilege and assign it to the user.