3 ms·
Is Keycloak something that is intended to be exposed publicly, or is this something typically used behind a VPN or equivalent protection?
by password4321 5y ago
Is Keycloak something that is intended to be exposed publicly, or is this something typically used behind a VPN or equivalent protection?
- mooreds 5y agoIt depends on what your needs are. If you are using it for CIAM (customer identity and access management) then you are probably going to be putting it on the internet. If using it for internal IAM (identity and access management, also known as workforce identity) you can keep it inside your network. I believe Keycloak works either way.
- password4321 5y agoThanks. I was mostly wondering how comfortable "Hacker News" is exposing it publicly... going on zero experience and just gut feeling I put it at about the same level as RDP.
- mooreds 5y agoAh, I get what you are asking. I think it's far more secure than RDP because the protocols it's based on have learned lessons from RDP. Here's a document they have about securing Keycloak: https://www.keycloak.org/docs/latest/server_admin/#mitigating-security-threats https://www.keycloak.org/docs/latest/server_admin/#mitigatin... I too would be interested to hear from any folks running this software in prod how they deal with securing a public endpoint.