2

My legacy application needs to delegate user authentication to 'keycloak' which is a SSO provider. I have a couple of questions

  1. What happens to my legacy session-management? Do I still need to maintain it?
  2. Can 'keycloak' act as my session management server or is it only an authentication system.
TheMonkWhoSoldHisCode
  • 2,182
  • 3
  • 26
  • 40

1 Answers1

4
  1. What happens to my legacy session-management? Do I still need to maintain it?

Answer - It is application dependent and there cannot be one rule to it. In our case we ended up maintaining the session data on the legacy application. Asking KEYCLOAK to manage my session data would have meant, I had to do a lot of changes in the legacy code which would be EOL in a couple of years.

  1. Can 'keycloak' act as my session management server or is it only an authentication system.

Answer - Yes pretty much.

TheMonkWhoSoldHisCode
  • 2,182
  • 3
  • 26
  • 40
  • For your second point, do you mean yes to both session management server and authentication system? – jeff Apr 08 '22 at 20:05