Authenticate and authorize users “your way” when they access your appl & platf
summary
Keycloak demo shows concrete, working moves: prompt=none for silent session checks and immediate discovery via the well-known URL, automatic registration that returns a code and logs the user in, and the check-session iframe used to detect cross-tab logouts. New in 26.1 is per-client ACR enforcement and pushed authorization to hide parameters; 26.2 adds an email verification action. Demo uses panva openid-client (JS) and mentions Nimbus for Java; features are modular and tested live.
AI-written summary · about
chapters (28)
- 0:00User authentication with Keycloak
- 1:06Auth overview
- 3:12OpenID Connect actors
- 4:41Keycloak history
- 6:26Demo setup
- 7:31Login status with prompt none
- 8:32Self-registration in Keycloak
- 9:15New user login
- 10:19Logging out and session management
- 10:39Session state via iframes
- 11:41Prompt login token exchange
- 12:42Token validation
- 13:44Refreshing tokens
- 14:26Secure session end
- 15:38Q&A
- 16:00Second-factor enforcement
- 17:262FA in Keycloak 26.1
- 18:50Pushed auth requests
- 19:56Account Console
- 21:01Modular user actions
- 22:25Email verification
- 23:31Profile customization
- 25:42Profile management
- 26:46Restrict access via flows
- 27:48Keycloak extensions
- 28:50OpenID Connect standards
- 30:38Keycloak 26.2 highlights
- 31:21Resources
related talks
31mDelegate Authentication and a Lot More To Keycloak With OpenID...
26mKeycloak Introduction and Demo
45mOAuth and beyond: Modern auth not only for the web
17mSponsored Demo: MCP Auth Demo: CIMD With Keycloak
50mFine - Grained Authorization with Keycloak SSO
14mKeycloak Journey - Evolution of Business and Community
45mSecure your application with WebAuthn
40mA Walkthrough of Keycloak