Web Scale SSO
summary
Red Hat IT runs an always-on, geo‑resilient SSO stack built from RH-SSO (Keycloak downstream), JBoss Data Grid (Infinispan), MariaDB + Galera and Ansible for provisioning. The system sustains 1,000,000 unique logins/day and survives a full data‑center outage; JDG holds sessions/offline tokens so users can hop datacenters without reauth. Custom Keycloak SPIs implement company user stores, legal checks and Docker auth; main operational pain points are async DB replication race conditions on auth code flows and the desire to move from few large VMs to finer horizontal scaling and canary deploys.
AI-written summary · about
chapters (8)
- 0:00Intro
- 0:50Open Source
- 3:59Infrastructure
- 4:37SSO VMs
- 6:33Key Cloak
- 11:54Custom Sauce
- 13:32Future
- 18:54Questions
related talks
46mHighly available Identity and Access Management with multi-site Keycloak deployments in t...
01h 03mSingle Sign On with Keycloak: why and how
12mScaling Identity for Global SASE with Keycloak
01h 05mSecuring Spring applications with Keycloak
54mHow to secure your Spring apps with Keycloak
16mIs your SSO on point, or is it more like Single Sign-Oh-no?
54mHow to secure your Spring Apps with Keycloak
06mInterview of Alexander Schwartz