Keycloak Identity Brokering

How to use Keycloak as an identity broker in identity federation. OpenID Connect protocol used for identity federation. Keycloak supports both OpenID Connect & SAML protocols
A spring boot application and two Keycloak servers are used for the demonstration.
Spring boot application and Identity broker integration complete video: • Keycloak Spring Boot E...

[@doantruong1007]

Thanks for sharing knowledge. Wish your channel more and more audience.

[@hexadefence]

Thank you very much Doang Truong

[@darioterzioski7914]

Super!

[@SaurabhPandey-vy8sv]

Hi, can you please make a playlist on forgerock

[@VijayKumar-qf6oj]

Thanks for sharing. Can we automatically select idp based on user id(email). I have scenario where multiple idp could be configured, and I want to select one of them based on user id when user logged in?.

[@hexadefence]

Thanks for the question.
This is possible through authentication SPI in keycloak

[@sasasisi8854]

Can you please make a video on how to configure keycloak with ldap server? as well as ldap server creation? thank you

[@hexadefence]

Thanks for the request.
I am using openldap docker container for my ldap related tasks.

[@sasasisi8854]

can you make a video connecting with saml instead of openid connect?

[@hexadefence]

Thanks for the request.
Will create a one

[@stephenunsure2943]

Excellent video thanks!
I'm currently trying to configure an external OIDC IdP. I get this error message:
"error":"invalid_grant","error_description":"Invalid redirect_uri"}
Any ideas?

[@hexadefence]

Your direct url should be listed in keycloak client configs as well.
You can specify what are the grant types that your client supports at client configs

[@stephenunsure2943]

@@hexadefence Thanks for the reply. The IdP in question was not Keycloak and the problem was because I hadn't registered a redirect URI in the client. Once the client was correctly configured, the grant type error was resolved.

[@LemontJap2k]

Getting “An unexpected error occurred while authenticating with the identiy provider.” Any clues?

[@hexadefence]

Can't provide an exact answer without checking server logs