Bilding an effective identity and access management architecture with Keycloak

No video

Bilding an effective identity and access management architecture with Keycloak

Рет қаралды 53,074

Devoxx

Күн бұрын

Sebastien Blanc, Red Hat

Пікірлер: 39

@marcianoacuerda 3 жыл бұрын

The few attendants to this talk proofs that we think we are better at security than we really are lol. Very good talk. I’m just getting started with Keycloak and I already want to use it in all of my projects. The policy stuff is crazy useful!

@rajuGT 4 жыл бұрын

At @12:00 you forgot to click save button :(

@ajit555db 5 жыл бұрын

For getting the avatar url in id jwt token, you needed to 1. Create a new client scope or use existing client scope 2. Map the user attribute (avatar url) to the the selected client scope 3. For the selected client, assign the above client scope as default client scope. 4. Now in the jwt id token, avatar url would appear.

@derskeal4240 2 жыл бұрын

He forgot to save when he created the User Attribute for avatar.

@raisanjmr 11 ай бұрын

hi bro i am new to keycloak and i am bit confused about the concepts can we connect

@gustavoteixeira8806 4 жыл бұрын

Great talk about Keycloak! Thanks!

@ThePakChina 2 жыл бұрын

Amazinnggg.Devoxx always bring very interesting topics.Thank you devoxx.

@rtyx 4 жыл бұрын

Pure gold @28:00

@inclinedscorpio 3 жыл бұрын

Great Session. Thanks for this !

@mb.prathamesh 2 жыл бұрын

Informative Session!

@stefanhuber9095 2 жыл бұрын

To make the avatar picture visible you forgot to Save the attribute at minute 12:04

@YogendraTamang 3 жыл бұрын

super useful video.

@rbelatamas Жыл бұрын

great explanation! Thank you so much ❤

@quangtruongnguyen9481 2 жыл бұрын

I think Policy Enforcement Point call keycloak server(with grant_type=uma-ticket) every time request to check if it is acceptable or not

@fernandobaroni1497 4 жыл бұрын

Great video, good explanations!!

@stefanholtker3944 4 жыл бұрын

Thank you for this nice Presentation. May i ask what OS and Terminal u use?

@nec1211986 4 жыл бұрын

he's using Mac for sure

@christiancarpinelli 4 жыл бұрын

@@nec1211986 That's RHEL (Red Hat Enterprise Linux)

@estanislaumarques4669 3 жыл бұрын

@@nec1211986 No no!!!

@JUNO2206 Жыл бұрын

Two factor 🙂

@bomkarram 4 жыл бұрын

Great Talk

@user-hz3bn2jm5o Жыл бұрын

does anyone have keycloak hardening guide?

@mackyin 3 жыл бұрын

Thanks,do we have this code in github?

@amazinggracechoirkabugaoff7176 Жыл бұрын

what should i do if i want to login and get such response of {access_token, id_token, refresh_token} but also I want to add new object in this response ?

@yag359 3 жыл бұрын

Just so I understand - by following this demo I would need to update all of the UI pages contained in Keycloak so that I can get my application's look and feel - correct? Does that mean I essentially need to maintain 2 sets of code (i.e. my application ui code and the keycloak ui code)? And consequently potentially coordinate my application deployments with re-deployment of Keycloak?

@nebeade 2 жыл бұрын

49:50 no you can use REST to do that with your own app

@PabloPazosGutierrez 2 жыл бұрын

I believe the keycloak customization stuff should be done once, though it might change from app to app, so on that area I guess it will need some customization per-app, but it's still just the GUI, not the whole logic, which might be a bunch of code more than just the GUI.

@FuzzPiAndFacial 3 жыл бұрын

Is it possible the something with oauth

@MrGaryC-1 2 жыл бұрын

The demo is good but the text on the screen is SOOO BLURRY I cant read what he is doing. I need to audio just so he can give the play by play.

@devsmart8104 Жыл бұрын

Case with avatar is like stend up

@QuangNguyen-ed5sk 3 жыл бұрын

I love Keycloak but please rewrite it in Golang :) I can not see that Keycloak is eating about 450MB Ram in IDLE by comparing with 20MB of a service in Go.

@FranciscoMoura-paco 2 жыл бұрын

From Keycloak 17.x, it was built using Quarkus, with low memory usage and fast start up.

@johnnybegood8531 Жыл бұрын

You could consider zitadel if you want something written in go.

@AndersJackson Жыл бұрын

(Title is spelled wrong on the video)

@bltzbrg 2 жыл бұрын

"Bilding"?

@MotownGuitarJoe 2 жыл бұрын

My first thought too, but then I realized that English is his second language. Cut the dude a break. I'm guessing his English is WAY better than either of our second languages.

@bltzbrg 2 жыл бұрын

@@MotownGuitarJoe My second language should be almost on a similar level but my 3rd not. I think this account here just stole the video and fucked up the title :D