cl-lightning-talk-use-keycloak-to-build-an-authentication-system-for-cloud-native-application-cl-cong-shu-xi-zhi-keycloak-chang-zhi-cha-mo-duo-xu-ni-yiting-jiang-daocloud.pptx

1、Use Keycloak to Build an Authentication System for Cloud-Native Application,Yiting Jiang,DaoCloud,Agenda,What is KeycloakKeycloak Main FeaturesWhy DaoCloud integrates keycloakHow our Authentication System uses KeycloakCustomize keycloak functionsHow to customize identity providerHow to customize log

2、in page,What is Keycloak,Identity and Access Management SystemSingle Sign-On Solution for web apps and services.,Keycloak Main Features,SSO,User Management,Password Policy,Authorization,Why DaoCloud integrates Keycloak,Full-featuredProfessional:Standard Protocols(OIDC,SAML,LDAP,.)Out of the box,easi

3、ly deployed on KubernetesCNCF IncubatingMaturity Level(April,2023),DX Identity Management and Authentication Service,DX Cloud Native Platform,Other Services(Web Apps),OIDC,How authentication system uses Keycloak,OIDCSAML,DX UI,DX Identity Management and Authentication System,SSO Client,DX APIServer,

4、User Management,Identity Provider,OIDCSAML,Admin Rest API,SSO Client,User Management,Identity Provider,Keycloak Login UI(Custom Theme),Any Web App,Customize keycloak functions,ExamplesNon-standard OAuth2 Identity ProviderCustomize Login PageTrigger a webhook when a user created event happens,How to

5、customize Identity Provider(1),Service Provider Interfaceshttps:/www.keycloak.org/docs/25.0.2/server_development/#_providers,Nonstandard OAuth2,Custom Identity ProviderPlugin,IdentityProviders,External Identity Provider,How to customize Identity Provider(2),Implement SPIImplement ProviderFactory/Pro

6、vider interfacesCreate service configuration files,Register pluginPackage.jar(mvnclean package)Copy.jar file to providers/directoryRun thekc.sh|bat buildcommand,How to customize login page,Customize theme:https:/www.keycloak.org/docs/25.0.2