How to secure your Spring apps with Keycloak
summary
Keycloak centralizes authentication and authorization for Spring apps, providing OpenID Connect / OAuth2 / SAML2 support, built-in SSO/SSO-out, user federation with LDAP/Kerberos/Active Directory, and 2‑factor via TOTP/YubiKey-style tokens. Tokens (access, refresh, offline, ID) carry claims and are signed; apps verify signatures or call introspection. Integration options include Spring Security adapters, servlet filters, a gatekeeper proxy, and example extensions on GitHub. Production patterns cover clustering, high‑availability, a web UI for realms/clients/roles, and an extension playground that actually runs.
AI-written summary · about
chapters (13)
- 0:00Keycloak and identity management
- 3:04What is Keycloak benefits
- 8:16Keycloak enterprise features
- 13:50Custom login experiences
- 21:29Keycloak architecture protocols
- 27:05Single sign-on auth
- 31:17Token handling OIDC flows
- 36:47Token security validation
- 38:36Access tokens and data
- 41:15Keycloak Spring integration
- 46:14Self-service accounts
- 48:15Extending Keycloak features
- 50:05Keycloak deployment monitoring
related talks
54mHow to secure your Spring Apps with Keycloak
53mHow to Secure Your Spring Apps with Keycloak
01h 05mSecuring Spring applications with Keycloak
51mEasily secure and add Identity Management to your Spring(Boot) applications
54mIdentity Management to your Spring Boot applications
51mSecuring applications with OAuth2 and OpenID Connect using SpringSecurit
32mEasily secure and add Identity Management to your Spring Boot applications
50mArchitectural Patterns for Spring Security You Wish Your Tech Lead Knew