Keycloak and OIDC

-- Description

In this beginner’s workshop, I will explain the basics of OIDC (OpenID Connect)-based authentication and how to use and configure Keycloak for this. Keycloak as a central IAM (Identity & Access Management) and SSO (Single Sign-On) system is experiencing a real boom and is in use in numerous companies and on countless websites. It’s not always easy for beginners to get to grips with all the new material and the many new terms. Many developers are (unfortunately) still afraid of the topic of security.

We will secure a distributed application landscape with Keycloak-based authentication, set up realms, clients and users and adapt the login flow to our requirements. After that, you won’t be a master yet, but you will have a better overview and know how Keycloak works and where to look when in doubt.

-- Agenda

• OpenID Connect basics
• Keycloak basics and operation (only the most important)
• Realm configuration
• Themeing the Keycloak UIs
• Client configuration (grant types)
• User administration
• Customization of authentication flows

-- Audience

The workshop is aimed at all development staff who want to get a good overview and introduction to single sign-on (SSO) and identity management with Keycloak quickly and easily. No special prior knowledge is necessary, but basic experience in software and web development is required.

Technical requirements

As “operating environment” we use a local Docker-Compose environment to keep the operational overhead as low as possible. The required YAML definitions and configuration files, as well as Keycloak extensions for the training environment will be made available to you in advance as a download.

• Notebook/laptop
• Text editor (Notepad++, VS Code, etc.)
• Docker and Docker Compose V2 installed and running (if necessary, grant local admin rights on the computer)
• Internet access (check proxy/firewall/VPN configurations etc. if necessary)
• Browser
• HTTP client (e.g. Insomnia, Postman, REST client for VS Code Plugin, etc.)

-- Training Objectives