4 ms·

Keycloak is an authentication portal that sits in front of other applications thereby freeing those applications from the burden of implementing login forms and

Keycloak is an authentication portal that sits in front of other applications thereby freeing those applications from the burden of implementing login forms and secure password storage.

tofflos 6y ago
Regarding a SaaS application. Let's say you're a SaaS provider and you're selling your service to a big organization. In addition to providing login forms Keycloak also implements the SAML and OpenID Connect standards which means that employees of the big organization can be single signed on from their office computers.
devnullbyte 6y ago
"that sits in front of " does that denote that miminal refactor / re-architecture is needed for a rest based application, trying to get an idea of how easy it is to start using keycloak?
- tofflos 6y ago
  By sits in front of I mean that it's a completely separate web application rather than a framework, library or proxy that is somehow bundled with your application. Whenever you want someone authenticated you redirect the user's browser to Keycloak. Keycloak will redirect the user's browser back to you once authentication has been completed. In the best case scenario you will find a library that integrates with your choice of web framework, provide configuration (i.e. the URL to Keycloak), and the library will do all the heavy lifting for you. I found Keycloak as a product relatively easy to get started with. But I still don't think I fully understand the authentication landscape with its' many alternatives and their many security implications.
- Robinyo 6y ago
  Some Keycloak-related tutorial style posts: * Getting started with Keycloak: https://robferguson.org/blog/2019/12/24/getting-started-with-keycloak/ https://robferguson.org/blog/2019/12/24/getting-started-with... * Angular, OpenID Connect and Keycloak: https://robferguson.org/blog/2019/12/29/angular-openid-connect-keycloak/ https://robferguson.org/blog/2019/12/29/angular-openid-conne... * Angular, OAuth 2.0 and Keycloak: https://robferguson.org/blog/2019/12/31/angular-oauth2-keycloak/ https://robferguson.org/blog/2019/12/31/angular-oauth2-keycl... * Keycloak, Flowable and OpenLDAP: https://robferguson.org/blog/2020/01/03/keycloak-flowable-and-openldap/ https://robferguson.org/blog/2020/01/03/keycloak-flowable-an... * Keycloak Themes - Part 1: https://robferguson.org/blog/2020/04/12/keycloak-themes-part-1/ https://robferguson.org/blog/2020/04/12/keycloak-themes-part...

Keycloak is an authentication portal that sits in front of other applications thereby freeing those applications from the burden of implementing login forms and secure password storage.

tofflos 6y ago

Regarding a SaaS application. Let's say you're a SaaS provider and you're selling your service to a big organization. In addition to providing login forms Keycloak also implements the SAML and OpenID Connect standards which means that employees of the big organization can be single signed on from their office computers.

devnullbyte 6y ago

"that sits in front of " does that denote that miminal refactor / re-architecture is needed for a rest based application, trying to get an idea of how easy it is to start using keycloak?

tofflos 6y ago
By sits in front of I mean that it's a completely separate web application rather than a framework, library or proxy that is somehow bundled with your application. Whenever you want someone authenticated you redirect the user's browser to Keycloak. Keycloak will redirect the user's browser back to you once authentication has been completed. In the best case scenario you will find a library that integrates with your choice of web framework, provide configuration (i.e. the URL to Keycloak), and the library will do all the heavy lifting for you. I found Keycloak as a product relatively easy to get started with. But I still don't think I fully understand the authentication landscape with its' many alternatives and their many security implications.
Robinyo 6y ago
Some Keycloak-related tutorial style posts: * Getting started with Keycloak: https://robferguson.org/blog/2019/12/24/getting-started-with-keycloak/ https://robferguson.org/blog/2019/12/24/getting-started-with... * Angular, OpenID Connect and Keycloak: https://robferguson.org/blog/2019/12/29/angular-openid-connect-keycloak/ https://robferguson.org/blog/2019/12/29/angular-openid-conne... * Angular, OAuth 2.0 and Keycloak: https://robferguson.org/blog/2019/12/31/angular-oauth2-keycloak/ https://robferguson.org/blog/2019/12/31/angular-oauth2-keycl... * Keycloak, Flowable and OpenLDAP: https://robferguson.org/blog/2020/01/03/keycloak-flowable-and-openldap/ https://robferguson.org/blog/2020/01/03/keycloak-flowable-an... * Keycloak Themes - Part 1: https://robferguson.org/blog/2020/04/12/keycloak-themes-part-1/ https://robferguson.org/blog/2020/04/12/keycloak-themes-part...