KEYCLOAK Enforce User Re-Authentication (e.g. before Updating Password) | Niko Köbler (@dasniko)

[@moriya-tzafar]

Hi Niko, Is it possible to enter the current password in the same page/form of the updated password?

[@dypsokk9669]

Hi Niko, thank you again for this video. I you are working on a future one, I may have a problem that Keycloak is not able to handle (I think, but you may have a different opinion ;-)) => I have a user that need to log in a SPA application and assume a role of administrator for 3 tenants (over 5) : so he have a dropdown on the upper right of his screen to switch from one tenant to another. I tried my best to find a way to include the role and the list of tenant linked with role in the claims with no luck. So for now we have decided to create 3 accounts and he have to logout/login foreach tenant, which is not great.... Do you think of a way to solve this ? DO I need to create a custom mapper or is there a native trick ? Anyway thank you for your videos.

[@wildking8607]

Hi, I was prompted to re-authenticate by default when updating the password. Note that this occurs only when redirecting to update the password from the Keycloak.js library in React.js. Is there a way to prevent this?

[@hduy8536]

Hello, I am using keycloak to login and redirect azure but I am getting the error that the user already exists in realm users like email but the first login flow the user has to update his information, I want it to automatically Is there any way to automatically set link account in Linked identity providers? Thank you very much

[@FernandoAlavaZambrano]

Hi Niko, thanks for this video. I would like to ask if this option is still valid if, for example, I want to override a different method in the default UpdatePassword, if I want to override requiredActionChallenge. I have been trying to do that based on this video, but without luck, Thanks in advance for your help.

[@FernandoAlavaZambrano]

Never mind Niko, I found the solution to my problem in your github repo, thanks!

[@marcom.]

Da bin ich jetzt aber überrascht, dass man dafür extra eigenen Code schreiben muss. Ich hätte in der Admin-Console irgendwo eine Checkbox erwartet, die dafür sorgt, dass man auf der Seite zur Änderung des Passwortes auch noch mal sein bisheriges eingeben muss - so wie es eigentlich fast überall gemacht wird.

[@dasniko]

Wenn die letzte Authentifizierung länger als 5 Minuten (Default) zurückliegt, wird man automatisch gefragt. Und „eigentlich fast überall“ muss ich widersprechen. Ich habe schon so viel gesehen, und „fast überall“ ist leider nicht korrekt und nur eine subjektiv gefühlte Wahrnehmung. Es gibt sogar Szenarien, in denen sowas kontraproduktiv sein kann. Das ist aber kein Thema hier für die Kommentare.

[@kelumsepala3632]

Hi Niko, Is it possible to change keycloak logos for commercial use?

[@wildking8607]

Yes, it is possible with a custom theme

[@moriya-tzafar]

is there a plan to add this to the built in keycloak?

[@dasniko]

See relase notes for KC23, there's now an option to achieve this ootb.

[@ariftsel1224]

Hi Niko, how can I set different password policies to different users in a single realm ?

[@dasniko]

It' not possible with the built-in logic. It also makes IMHO no sense in terms of security.

[@ariftsel1224]

@@dasniko ok thank you