Re:Keycloak: Open-source identity and access management
by pm90 on Tuesday April 14, 2020 @11:08PM
(#22874086)
I’m a bit confused...are you federating user management of those customers to their IDP? Or running separate keycloack instances for each of them? Or something else?
[ Parent
| on HN ]
Re:Keycloak: Open-source identity and access management
by 411111111111111 on Wednesday April 15, 2020 @02:52AM
(#22875253)
they could also just let them run their own keycloak instance and use that as the provider for the realm so customers can more easily debug it themselves.
it doesnt need much maintenance, so it doesnt really get easier than that.
Re:Keycloak: Open-source identity and access management
by benjaminwai on Wednesday April 15, 2020 @05:59AM
(#22876066)
Think it would be using brokering, the instance of Keycloak would be an external identity provider. Each customer would have their own instance of Keycloak that could then be configured to broker their choice of identity provider. I think this might be achievable at the realm level in a smaller scale deployment, i.e., using a separate realm for each customer but still chaining them back to the central realm through brokering, rather than spawning off new instances of Keycloak. Just a thought..