Stack Overflow
Stack Overflow

Questions tagged [keycloak]

Keycloak is an integrated single sign-on (SSO) and identity manager (IDM) for browser apps and RESTful web services. It is built on top of JBoss and WildFly, it complies with the OAuth 2.0, Open ID Connect (OIDC), JSON Web Token (JWT) and SAML 2.0 specifications.

About

Keycloak is a free and open source Identity and Access Management solution aimed at modern applications and services. It makes it easy to secure applications and services with little to no code.

Offers an integrated single sign-on (SSO) and identity manager for browser applications and RESTful web services. Built on top WildFly / JBoss and implements the OAuth 2.0, Open ID Connect and JSON Web Token (JWT) and SAML 2.0 specifications.

Keycloak was initially targeted towards the JBoss and WildFly communities, but it has solutions for many other environments like Tomcat, Jetty, Node.js, Ruby on Rails, Grails, etc. Options are to deploy it with an existing applicationserver, as a black-box appliance, or as an OpenShift, Kubernetes, or Docker service.

Features

  • Single sign-on (SSO) and single log out (SLO) for browser applications
  • Social Broker. Enable Google, Facebook, Yahoo, and Twitter social login without any code required.
  • Optional LDAP(S) or Active Directory identity federation
  • Optional user registration
  • Password and TOTP support (via Google Authenticator or FreeOTP)
  • Client X.509 certificate authentication coming soon
  • User session management from both administrator and user perspective
  • Customizable themes for user facing pages: login, grant pages, account management, emails, and administrator console all customizable!
  • OAuth Bearer token administrator for REST services
  • Integrated browser app to REST service token propagation
  • Administrator REST API
  • OAuth 2.0 Grant requests
  • CORS support
  • CORS Web Origin management and validation
  • Completely centrally managed user and role mapping metadata. Minimal configuration at the application side
  • Admin Console for managing users, roles, role mappings, applications, user sessions, allowed CORS web origins, and OAuth clients
  • Deployable as a WAR, appliance, or an OpenShift, Kubernetes, and Docker service
  • Supports JBoss AS7, EAP 6.x/7.x, and WildFly applications, as well as Node.js, other non-Java applications
  • JavaScript/HTML 5 adapter for pure JavaScript applications
  • Session management from admin console
  • Revocation policies
  • Password policies
  • OpenID Connect Support
  • SAML 2.0 support

Useful links

7431 questions
40
votes
4 answers

Keycloak, not returning access token if update password action selected

I am calling /auth/realms/master/protocol/openid-connect/token to get access token by sending below content in…
Shailesh Narkhede
  • 605
  • 1
  • 5
  • 11
34
votes
2 answers

Keycloak adaptor for golang application

I am going to secure my golang application using keycloak, but keycloak itself does not support go language. There are some go adaptor as an open project in github that has implemented openId connect protocol as a provider service, but they do not…
setiabb
  • 529
  • 1
  • 5
  • 13
31
votes
3 answers

Keycloak - direct user link registration

I have set up a web application with Keycloak in my local machine. Since Im using Keycloak as SSO implementation, I want in my web app that whenever SIGNUP button is click, user is directed into the registration page, and not going through the LOGIN…
johntanquinco
  • 1,213
  • 2
  • 11
  • 18
30
votes
5 answers

Keycloak - Create Admin User in a Realm

How do I create an admin user in a realm in Keycloak? I tried /bin/add-user.sh -r myrealm -u admin -p It gave me the error: * Error * WFLYDM0065: The user supplied realm name 'myrealm' does not match the realm name discovered from the…
RAbraham
  • 5,956
  • 8
  • 45
  • 80
30
votes
4 answers

Importing keycloak configuration files while using docker-compose

I'm trying to import configuration from one keycloak instance into many different keycloak instances (Each instance is for the same application just differnt sections in my CICD flow) I'm running keycloak through Docker and finding it difficult to…
user7816390
30
votes
4 answers

Keycloak public client and authorization

We are using keycloak-adapter with Jetty for authentication and authorization using Keycloak. As per Keycloak doc for OIDC Auth flow: Another important aspect of this flow is the concept of a public vs. a confidential client. Confidential clients…
NumeroUno
  • 1,100
  • 2
  • 14
  • 34
30
votes
1 answer

How to Create a Client in Keycloak to use with AWS Cognito Identity Federation

I have a user base with identity and authentication managed by keycloak. I would like to allow these users to login and use AWS API Gateway services with Cognito using an OpenID Connect federation. The AWS documentation on using an OpenID Connect…
shonky linux user
  • 6,131
  • 4
  • 46
  • 73
29
votes
2 answers

Should I use keycloak or not?

I'm just starting a new project. The result will be an API server and a progressive web app. The API server is implemented with TypeScript and the NestJS framework, the client with Angular 6. I've been flirting with keycloak for some time. Still,…
CaKa
  • 3,219
  • 3
  • 14
  • 20
28
votes
1 answer

Copy entire directory from container to host

I'm trying to copy an entire directory from my docker image to my local machine. The image is a keycloak image, and I'd like to copy the themes folder so I can work on a custom theme. I am running the following command - docker cp…
Harry Blue
  • 4,202
  • 10
  • 39
  • 78
28
votes
1 answer

How to get Keycloak users via REST without admin account

Is there a way to get a list of users on a Keycloak realm via REST WITHOUT using an admin account? Maybe some sort of assignable role from the admin console? Looking for any ideas. Right now I'm using admin credentials to grab an access token, then…
Borja Canseco
  • 325
  • 1
  • 6
  • 24
28
votes
5 answers

Keycloak CORS issue when being redirected to login

I am trying to get the nodeJS keycloak adapter working with my Express application, but am facing a CORS issue when it tries to redirect to the login page for routes I have protected with the keycloak middleware: XMLHttpRequest cannot load …
mindparse
  • 6,115
  • 27
  • 90
  • 191
28
votes
5 answers

keycloak - CODE_TO_TOKEN_ERROR after user is authenticated

I am working with the nodeJS keycloak adapter and so far have my client application redirecting to the keycloak login. When attempting to login, I get an error in the keycloak logs as follows: 12:07:12,341 WARN [org.keycloak.events] (default…
mindparse
  • 6,115
  • 27
  • 90
  • 191
28
votes
5 answers

Keycloak client for ASP.NET Core

Is there any existing Keycloak client for Asp.net Core? I have found a NuGet package for .net but it doesn't work with Core. Do you have any ideas how to easily integrate with this security server (or maybe using any other alternatives)?
Michał J. Gąsior
  • 1,457
  • 3
  • 21
  • 39
27
votes
8 answers

M1 mac cannot run jboss/keycloak docker image

Switched to m1 mac a week ago and I cannot get my application up and running with docker because of the jboss/keycloak image not working as expected. Getting the following message from the container when trying to access localhost:8080 12:08:12,456…
Ivan Andonöw
  • 373
  • 1
  • 3
  • 6
27
votes
3 answers

Example keycloak spring-boot app fails to find bean KeycloakSpringBootConfigResolver

I'm trying to run example app from: https://github.com/keycloak/keycloak-quickstarts/tree/latest/app-springboot I'm getting error: *************************** APPLICATION FAILED TO START *************************** Description: Parameter 1 of…
Krzysztof Tkacz
  • 488
  • 2
  • 5
  • 15
1 2
3
…
99 100