Single Sign-On in 15 Minutes Without Changing Your Code
summary
A demo shows how to add OpenID Connect SSO to two existing apps without changing their code by using Keycloak as the provider and Apache with mod_auth_openidc as a reverse proxy. The setup runs in Docker Compose, configures the provider metadata, client id/secret and redirect URL, and uses about 50 lines of Apache config to proxy a Spring Boot app and a Flask app while injecting user headers and enforcing basic role checks.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 0:42SSO and OpenID Connect
- 3:29SSO architecture
- 5:15Demo of unsecured apps
- 6:17Apache reverse proxy config
- 9:13Docker Compose setup
- 10:37Identity provider check
- 10:58Securing Java and Python apps
- 12:01Roles and headers management
- 13:04Summary and resources
related talks
54mHow to secure your Spring Apps with Keycloak
01h 12mIdentity 2.0: the what, why and how of social and federated login
54mIdentity Management to your Spring Boot applications
53mHow to Secure Your Spring Apps with Keycloak
19mImpress your enterprise customers with OpenID Connect login
01h 03mSingle Sign On with Keycloak: why and how
54mHow to secure your Spring apps with Keycloak
43mOAuth2, OpenID: live-coding SSO, from first principles