Delegate Authentication and a Lot More To Keycloak With OpenID...
summary
Shows how Keycloak acts as an OpenID Connect provider that redirects to authorization, token, userinfo and end session endpoints, demonstrates using prompt values (prompt=none / create / login) to check sessions, register and authenticate, and exchanges code for ID/access/refresh tokens with session state and iframe session checks. Covers account console and KC action update profile for application‑initiated flows, incremental profiling via scopes and a form editor, MFA via ACR claims, verify email (26.2), and multi‑tenant support with organizations (26.2) plus operator/terraform/config‑as‑code options.
AI-written summary · about
chapters (7)
- 0:00Keycloak and OpenID Connect
- 2:08Authentication flows
- 8:38Token exchange and sessions
- 12:11Beyond authentication
- 16:24User profile management
- 20:41Keycloak automation
- 25:43Q&A
related talks
33mAuthenticate and authorize users “your way” when they access your appl & platf
26mKeycloak Introduction and Demo
40mA Walkthrough of Keycloak
33mOAuth and OpenID Connect Deep Dive
01h 12mIdentity 2.0: the what, why and how of social and federated login
53mOAuth2/OIDC security weaknesses and pitfalls
01h 03mSingle Sign On with Keycloak: why and how
58mOAUTH, OPENID CONNECT & .NET – THE GOOD PARTS