Standardizing Authentication Flows in Keycloak Environments – Efficient Authorization S...
summary
Standardizes authentication into four auth levels (ID/password, OTP, client cert, location) and consolidates flows for 100+ clients, replacing per-client logic with a Keycloak Authenticator SPI that delegates authorization to OPA policy as code. Policies live in Git, deploy via CI/CD, and allow permanent rules plus temporary exceptions (for example date- or region-limited access). Result is clear authN/authZ separation, faster policy updates without touching Keycloak, fewer knowledge silos, and lower maintenance overhead.
AI-written summary · about
related talks
31mHigh-level API Security
31mDelegate Authentication and a Lot More To Keycloak With OpenID...
30mAuthZEN in Practice: Standardizing Authorization for Cloud Native Platforms and Agents
33mAuthenticate and authorize users “your way” when they access your appl & platf
46mBuilding a Unified Authentication Platform Using Keycloak
01h 03mSingle Sign On with Keycloak: why and how
27mDesigning an Agentic AI-Ready Secure Authentication and Authorization Platform
26mOne Auth Gateway to authenticate them all