Book Image

Keycloak - Identity and Access Management for Modern Applications - Second Edition

By : Stian Thorgersen, Pedro Igor Silva
4.8 (5)
Book Image

Keycloak - Identity and Access Management for Modern Applications - Second Edition

4.8 (5)
By: Stian Thorgersen, Pedro Igor Silva

Overview of this book

The second edition of Keycloak - Identity and Access Management for Modern Applications is an updated, comprehensive introduction to Keycloak and its updates. In this new edition, you will learn how to use the latest distribution of Keycloak. The recent versions of Keycloak are now based on Quarkus, which brings a new and improved user experience and a new admin console with a higher focus on usability. You will see how to leverage Spring Security, instead of the Keycloak Spring adapter while using Keycloak 22. As you progress, you’ll understand the new Keycloak distribution and explore best practices in using OAuth. Finally, you'll cover general best practices and other information on how to protect your applications. By the end of this new edition, you’ll have learned how to install and manage the latest version of Keycloak to secure new and existing applications using the latest features.
Table of Contents (18 chapters)
16
Other Books You May Enjoy
17
Index

Index

A

access tokens

access, limiting 69

access, limiting with audience 70, 71

lifetimes, managing 243-245

limiting, with roles 71-74

limiting, with scope 75-77

obtaining 62-65

validating 77-80

Active Directory 3

integrating with 183-186

active sessions

managing 237-239

admin URL

setting 156, 157

Apache Freemarker 270

application

access, authorizing with OAuth 2.0 25-29

user consent, requiring 65-69

applications

securing 295

attribute-based access control (ABAC) 182

using 145

authentication and access control

enabling, for database 289, 290

authentication flows 202, 203

configuring 204-209

customizing 272-276

WebAuthn, enabling 225-227

authentication request 30

authorization code 15, 44

authorization code flow 15, 26

Authorization Code Injection 113

authorization request 27, 30

authorization system 134, 135

B

backend for frontends (BFF) patterns...