abp icon indicating copy to clipboard operation
abp copied to clipboard

[Suggestion] keycloak

Open afernandes opened this issue 6 years ago • 10 comments

Suggestion: module for authentication and authorization of users using the keycloak https://www.keycloak.org/

afernandes avatar Mar 26 '19 22:03 afernandes

@afernandes keycloak uses openid connect protocol, right?

dejancg avatar Mar 26 '19 22:03 dejancg

We are using IdentityServer4. So, in short time, we don't want to spend time on that. However, it can be a good feature request for backlog. Thanks.

hikalkan avatar Mar 27 '19 19:03 hikalkan

@hikalkan keycloak doesn't respect the protocol 100% as IdentityServer4 does, but the difference is minor and it wouldn't be a lot of job to implement it. However, the required changes need to be made in IdentityModel library, so I guess it would require forking IdentityModel and modifying it slightly to make it compatible with both keycloak and IdentityServer4.

dejancg avatar Mar 27 '19 19:03 dejancg

I still have not delved into the subject, so forgive me if I say nonsense.

Keycloak is based on standard protocols and provides support for OpenID Connect, OAuth 2.0, and SAML.

But, the administrative part of IdentityServer4 is paid and Keycloak is Open Source.

https://www.identityserver.com/products/#AdminUI

In the way the project is today, is it possible to implement Single Sign-On and with an administrative area in an easy way?

afernandes avatar Mar 28 '19 01:03 afernandes

Also interested in this feature for a large e-commerce project... any updates on the interoperability and libraries since this was originally raised... been over a year since the last comment?

MedAnd avatar Jul 31 '20 06:07 MedAnd

Now that Identity Server has become a commercial product, the discussion is back on the agenda. It would be interesting to have other options such as keyclock or openiddict.

nicocomumu avatar Feb 01 '21 09:02 nicocomumu

same situation, keyclock is the only choice at the moment, it would be great if we support keyclock and openiddict.

evenlee avatar Aug 25 '21 09:08 evenlee

I think a good support for Keycloak would be great, as many companies already have Keycloak working for their identity and access management needs.

abdumostafa avatar Mar 16 '22 10:03 abdumostafa

Nowadays, we are working on Keycloak integration possibilities in parallel to the OpenIddict integration reseach.

hikalkan avatar Mar 21 '22 11:03 hikalkan

Nowadays, we are working on Keycloak integration possibilities in parallel to the OpenIddict integration reseach.

May I ask if it's available now?

khoavn avatar Dec 08 '22 07:12 khoavn

We've integrated Keycloak to this project: https://github.com/abpframework/eShopOnAbp Currently, we are not planning any specific integration. You can use this example as a reference.

hikalkan avatar Aug 21 '23 14:08 hikalkan