Keycloak

Description

This is the solution's identity and authorization management tool. It allows user information to be centralized for all applications that require it. The following chapter explains a simple way to add or remove a user from the entire platform or from a component.

Uses and Functionnalities

Key features and functionalities include:

• Support for industry-standard protocols such as OpenID Connect, OAuth 2.0, and SAML 2.0, allowing seamless integration with many systems.

• User federation capabilities to connect with existing user directories like LDAP and Active Directory, centralizing identity management.

• Identity brokering and social login, enabling users to sign in using external identity providers such as Google, Facebook, and GitHub.

• A web-based admin console for managing users, roles, permissions, and configuring fine-grained authorization policies.

• Account management console that empowers users to manage their profiles, sessions, and two-factor authentication settings.

• Customizable authentication flows, including advanced password policies and optional features like user self-registration and email verification.

• Session management tools to monitor and control user sessions centrally.

• Flexibility to secure web apps, mobile apps, and RESTful APIs using token-based authentication with access tokens issued by Keycloak.

• Extensible architecture supporting integration with external identity stores and the ability to customize login pages and user interfaces.

CICD integration method

To enable Clickhouse, set the following variables in your main configuration file.

keycloak = {
    enabled      = true
    version      = "7.7.16"
    ingress      = true
    namespace    = "keycloak"
    component    = "dp-apps"
    url_prefix   = "iam"
    release_name = "keycloak"
}

API / Swagger

API documentation

Releases

Official documentation

Keycloak documentation