Authentication and authorization with KeyCloak. This contains both, theory parts on all important concepts, and hands-on practice labs.

Table of Contents (Tu Update)

• Requirements and Setup
• Hands-On Workshop

  • Intro Labs

    • Lab: Authorization Grant Flows in Action
    • Demo: Auth Code Flow in Action
    • Demo: GitHub Client

  • Part 1 : OAuth 2.0 and OpenID Connect 1.0

    • Lab 1: Resource Server
    • Lab 2: Client (Auth Code)
    • Lab 3: Client (Client-Credentials)
    • Lab 4: Testing JWT Auth&Authz
    • Lab 5: JWT Testing Server
    • Lab 6: SPA Client (Authz Code with PKCE)

  • Part 2 : Fine-grained authorization

    • Lab 7: SpringBoot REST Service Protected Using Keycloak Authorization Services
    • Lab 8: Spring Security Application using Authorization Services
    • Lab 9: SpringBoot REST Service Protected Using Keycloak Authorization Services (Javascript Policies)
    • Lab 10: User-Managed Access (UMA 2.0)

  • Part 3 : SAML

    • Lab 11: Spring Boot Application with SAML 2.0
    • Lab 12: SAML SSO using an external identity provider

  • Part 4 : User Storage Federation

    • Lab 13: User federation using LDAP
    • Lab 14: Keycloak User Storage SPI

  • Part 5 : MFA

    • Lab 15: Keycloak 2FA SMS Authenticator
    • Lab 16: Conditional Keycloak 2FA SMS Authenticator

  • Part 6 : Identity Brokering

    • Lab 17: Using Github as an identity provider
    • Lab 18: Using Franceconnect as an identity provider

  • Bonus Labs

    • Lab 1: Multi-Tenant Resource Server
    • Lab 2: Resource Server with Micronaut
    • Lab 3: Resource Server with Quarkus
    • Lab 4: Keycloak Testcontainers
• Feedback
• License

To follow the hands-on workshop please open the workshop tutorial.

To check system requirements and setup for this workshop please follow the setup guide.

• Lab: Authorization Grant Flows in Action
• Demo: Authorization Code Grant Flow in Action
• Demo: A pre-defined OAuth2 client for GitHub

For the hands-on workshop you will extend a provided sample application along with guided tutorials.

The components you will build (and use) look like this:

Please check out the complete documentation for the sample application before starting with the first hands-on lab.

• Lab 1: OAuth2/OIDC Resource Server
• Lab 2: OAuth2/OIDC Web Client (Auth Code Flow)
• Lab 3: OAuth2/OIDC Batch Job Client (Client-Credentials Flow)
• Lab 4: OAuth2/OIDC Testing Environment
• Lab 5: JWT Testing Server
• Lab 6: OAuth2/OIDC Angular Client

• Lab 7: SpringBoot REST Service Protected Using Keycloak Authorization Services
• Lab 8: Spring Security Application using Authorization Services
• Lab 9: SpringBoot REST Service Protected Using Keycloak Authorization Services (Javascript Policies)
• Lab 10: User-Managed Access (UMA 2.0)

• Lab 11: Spring Boot Application with SAML 2.0
• Lab 12: SAML SSO using an external identity provider

• Lab 13: User federation using LDAP
• Lab 14: Keycloak User Storage SPI

• Lab 15: Keycloak 2FA SMS Authenticator
• Lab 16: Conditional Keycloak 2FA SMS Authenticator

• Lab 17: Using Github as an identity provider
• Lab 18: Using Franceconnect as an identity provider

• Lab 1 : Multi-Tenant Resource Server
• Lab 2 : OAuth2/OIDC Resource Server with Micronaut
• Lab 3 : OAuth2/OIDC Resource Server with Quarkus
• Lab 4 : Keycloak Testcontainers

This workshop is based on the following resources :

• Keycloak Quickstarts Examples
• Securing Microservices with OpenID Connect and Spring Security 5.1 @ Spring I/O 2019 by @andifalk.
• Keycloak/Authorization SpringBoot Example - devconf 2019 by @mposolda

Any feedback on this hands-on workshop is highly appreciated.

Apache 2.0 licensed