Alexander Schwartz

Delegating the chores of authenticating users to Keycloak

Stop building user authentication. Learn how to delegate the chores of registration, password resets, and session management to Keycloak and focus on your core application.

Delegating the chores of authenticating users to Keycloak
#1about 3 minutes

Understanding the complexities of modern user authentication

Delegating authentication is necessary because it involves more than just a login form, including registration, password recovery, and multi-factor authentication.

#2about 2 minutes

Introducing the key players in an OIDC ecosystem

The OpenID Connect architecture consists of three main actors: the end-user, the OpenID Provider like Keycloak, and the client application or relying party.

#3about 6 minutes

Using OIDC prompts for different user actions

Applications can use specific OIDC prompt parameters to check login status, initiate user registration, or trigger a standard login.

#4about 3 minutes

Handling session state, tokens, and user information

OpenID Connect provides standard endpoints and flows for checking session status with iframes, refreshing expired tokens, fetching user data, and securely logging out.

#5about 1 minute

Implementing step-up authentication for sensitive actions

Use Authentication Context Class Reference (ACR) values to request a higher level of assurance, such as a second factor, for critical operations.

#6about 3 minutes

Leveraging Keycloak's application-initiated actions

Keycloak's application-initiated actions allow you to redirect users to specific pages for tasks like updating their profile, changing a password, or verifying an email address.

#7about 2 minutes

Configuring user profiles for incremental data collection

Keycloak's user profile feature enables defining custom user attributes and using scopes to implement incremental profiling, collecting data only when an application requires it.

#8about 3 minutes

Customizing login flows and exploring further capabilities

Beyond standard authentication, Keycloak allows for customizing login flows to restrict client access and provides built-in support for features like password resets and remember me.

Related jobs
Jobs that call for the skills explored in this talk.

Job ad Dark

SabIna compys

SabIna compys
Vienna, Austria

Remote
€20-100K
Intermediate
JavaScript
.NET
+1

Matching moments

An overview of Keycloak for identity management
02:43 MIN

An overview of Keycloak for identity management

Keycloak case study: Making users happy with service level indicators and observability

Implementing authentication with Keycloak, Quarkus, and JWT
18:31 MIN

Implementing authentication with Keycloak, Quarkus, and JWT

Get started with securing your cloud-native Java microservices applications

Introducing Keymate for zero-rewrite authorization on Keycloak
01:08 MIN

Introducing Keymate for zero-rewrite authorization on Keycloak

Keymate – Modern Authorization for Developers

Answering audience questions on authorization best practices
18:44 MIN

Answering audience questions on authorization best practices

Un-complicate authorization maintenance

Q&A on career path and the future of passwordless
11:03 MIN

Q&A on career path and the future of passwordless

Accelerating Authentication Architecture: Taking Passwordless to the Next Level

Unifying tools with a centralized authentication system
05:40 MIN

Unifying tools with a centralized authentication system

Starting business without breaking the bank: Self hosted OSS productivity ecosystem

Deploying and configuring Keycloak for identity management
05:36 MIN

Deploying and configuring Keycloak for identity management

Get started with securing your cloud-native Java microservices applications

Replacing long-lived credentials with short-lived tokens
01:32 MIN

Replacing long-lived credentials with short-lived tokens

Supply Chain Security and the Real World: Lessons From Incidents

Featured Partners

Related Videos

See all videos
Keycloak case study: Making users happy with service level indicators and observability27:15

Keycloak case study: Making users happy with service level indicators and observability

Alexander Schwartz

Going Beyond Passwords: The Future of User Authentication27:55

Going Beyond Passwords: The Future of User Authentication

Gift Egwuenu

Keymate – Modern Authorization for Developers06:04

Keymate – Modern Authorization for Developers

Halil Özkan

Accelerating Authentication Architecture: Taking Passwordless to the Next Level49:52

Accelerating Authentication Architecture: Taking Passwordless to the Next Level

Yedidya Schwartz

Break the Chain: Decentralized solutions for today’s Web2.0 privacy problems29:31

Break the Chain: Decentralized solutions for today’s Web2.0 privacy problems

Adam Larter

Un-complicate authorization maintenance1:00:00

Un-complicate authorization maintenance

Alex Olivier

Passwordless future: WebAuthn and Passkeys in practice32:32

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner

No More Post-its: Boost your login security with APIs16:05

No More Post-its: Boost your login security with APIs

Alvaro Navarro

Related Articles

View all articles
CH
Chris Heilmann
All the videos of Halfstack London 2024!
Last month was Halfstack London, a conference about the web, JavaScript and half a dozen other things. We were there to deliver a talk, but also to record all the sessions and we're happy to share them with you. It took a bit as we had to wait for th...
All the videos of Halfstack London 2024!
KD
Krissy Davis
How to Get The Most Out of a Conference
Conferences are an excellent opportunity for individuals to establish connections, acquire knowledge, and develop professionally. So It’s crucial to know how to maximise the benefits of attending one.Attending a conference without a plan of action or...
How to Get The Most Out of a Conference

From learning to earning

Jobs that call for the skills explored in this talk.

DevOps KeyCloak

DevOps KeyCloak

Celad
Canton of Courbevoie-2, France

Unix
DevOps
Gitlab
Kubernetes
Microservices