det.social

Christian M. Grube 🐧<a href="https://social.tchncs.de/tags/KCWarden" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#KCWarden</a> 0.14.0 releasedkcwarden checks your <a href="https://social.tchncs.de/tags/Keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Keycloak</a> configuration for common misconfigurations and security vulnerabilities.<a href="https://social.tchncs.de/tags/adminlife" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#adminlife</a> <a href="https://social.tchncs.de/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://social.tchncs.de/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a><a href="https://github.com/iteratec/kcwarden/releases/tag/v0.14.0" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/iteratec/kcwarden/releases/tag/v0.14.0</a>

credativ GmbHMit PostgreSQL 18 wurde eine spannende neue Funktion eingeführt: Native Unterstützung für OAuth2. Wie funktioniert das jetzt nun?Mehr Informationen findet ihr unter: <a href="https://www.credativ.de/blog/credativ-inside/postgresql-18-trifft-oauth2-so-funktioniert-die-native-unterstuetzung-mit-keycloak/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.credativ.de/blog/credativ-inside/postgresql-18-trifft-oauth2-so-funktioniert-die-native-unterstuetzung-mit-keycloak/</a><a href="https://mastodon.social/tags/credativ" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#credativ</a> <a href="https://mastodon.social/tags/postgresql" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#postgresql</a> <a href="https://mastodon.social/tags/keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keycloak</a> <a href="https://mastodon.social/tags/oauth2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#oauth2</a> <a href="https://mastodon.social/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a>

Christian M. Grube 🐧<a href="https://social.tchncs.de/tags/keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keycloak</a> 26.3.1 releasedEnhancements: - Upgrade to Infinispan 15.0.16.Final- Update limitations of the preview feature rolling updates for patch releases infinispanBugs: - Importing a realm takes more than 1 minute when multiple others exist. dist/quarkus– NPE during loading user groups with concurrent deletion storage- Unable to configure TLS reloading in Keycloak version 26.2.0 or later account/api- Mark options for additional datasources as preview dist/quarkus- Keycloak Operator 26.3.0 fails to update to 26.3.0 operator- Docs: server_development/topics/themes.adoc docs- Keycloak 26.3.0 Regression: Failed to login if web-authn is disabled core<a href="https://social.tchncs.de/tags/adminlife" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#adminlife</a> <a href="https://social.tchncs.de/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> <a href="https://social.tchncs.de/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a><a href="https://github.com/keycloak/keycloak/releases/tag/26.3.1" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/keycloak/keycloak/releases/tag/26.3.1</a>

Silke MeyerFür "Identity Broker"-Szenarien mit Keycloak finde ich die Doku von Red Hat empfehlenswert. Dort ist verhältnismäßig gut beschrieben, wie man das Durchreichen von Claims/Attributen von einem Identity Provider durch einen anderen zu einem Client konfiguriert.<a href="https://docs.redhat.com/en/documentation/red_hat_build_of_keycloak/26.0/html/server_administration_guide/identity_broker" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://docs.redhat.com/en/documentation/red_hat_build_of_keycloak/26.0/html/server_administration_guide/identity_broker</a><a href="https://univention.social/tags/keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keycloak</a> <a href="https://univention.social/tags/singlesignon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#singlesignon</a> <a href="https://univention.social/tags/iam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#iam</a> <a href="https://univention.social/tags/oidc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#oidc</a> <a href="https://univention.social/tags/saml" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#saml</a>

damienbodBlogged: Implement ASP.NET Core OpenID Connect with Keycloak to implement Level of Authentication (LoA) requirements<a href="https://damienbod.com/2025/07/02/implement-asp-net-core-openid-connect-with-keykloak-to-implement-level-of-authentication-loa-requirements/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://damienbod.com/2025/07/02/implement-asp-net-core-openid-connect-with-keykloak-to-implement-level-of-authentication-loa-requirements/</a><a href="https://mastodon.social/tags/aspnetcore" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#aspnetcore</a> <a href="https://mastodon.social/tags/dotnet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dotnet</a> <a href="https://mastodon.social/tags/aspire" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#aspire</a> <a href="https://mastodon.social/tags/keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keycloak</a> <a href="https://mastodon.social/tags/identity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#identity</a> <a href="https://mastodon.social/tags/authentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentication</a> <a href="https://mastodon.social/tags/loa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#loa</a> <a href="https://mastodon.social/tags/iam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#iam</a> <a href="https://mastodon.social/tags/identity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#identity</a>

ChristophKurzer Nachtrag, ich möchte ja auch Lösungen liefern: Sollte jemand interesse an einer skalierbaren, sicheren und preiswerten Infrastruktur inkl. Chat, Video, Cloud (inkl Collabora), Wiki, Mastodon, sowie Groupware (open XChange) und IDM an alle Dienste interessiert sein, gerne melden. Wir haben dieses System letztes Jahr mit dem Relaunch des NABU-Netz komplett auf open-source Basis für mehrere tausend Personen bereits umgesetzt. <a href="https://digitalcourage.social/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> <a href="https://digitalcourage.social/tags/naturschutz" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#naturschutz</a> <a href="https://digitalcourage.social/tags/datenschutz" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#datenschutz</a> <a href="https://digitalcourage.social/tags/kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#kubernetes</a> <a href="https://digitalcourage.social/tags/opencloud" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opencloud</a> <a href="https://digitalcourage.social/tags/matrix" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#matrix</a> <a href="https://digitalcourage.social/tags/keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keycloak</a> <a href="https://digitalcourage.social/tags/bookstack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bookstack</a> <a href="https://digitalcourage.social/tags/opentofu" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opentofu</a> <a href="https://digitalcourage.social/tags/openxchange" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#openxchange</a> <a href="https://digitalcourage.social/tags/mastodon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mastodon</a> <a href="https://digitalcourage.social/tags/jitsi" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#jitsi</a>

Max Maass :donor:Looking forward to being at <a href="https://infosec.exchange/tags/KeyConf25" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#KeyConf25</a> and meeting all the interesting people there! My colleague Tim and I will be presenting our <a href="https://infosec.exchange/tags/Keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Keycloak</a> config auditor tool, <a href="https://infosec.exchange/tags/kcwarden" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#kcwarden</a>, that helps you keep your server configuration secure. <a href="https://github.com/iteratec/kcwarden" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/iteratec/kcwarden</a> <a href="https://fosstodon.org/@ahus1/114753988086598591" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://fosstodon.org/@ahus1/114753988086598591</a>

Alexander SchwartzThe talks have now been announced for KEYCONF25, the annual one-day conference about <a href="https://fosstodon.org/tags/Keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Keycloak</a>! Secure your ticket for August 28 in Amsterdam now!Join this one-day conference to learn how to manage <a href="https://fosstodon.org/tags/identities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#identities</a>, use it in AI and non-AI scenarios, scale and manage it with great <a href="https://fosstodon.org/tags/observability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#observability</a>, and run it securely with confidence!Last but not least, the the "Meet the maintainers" panel to ask live questions.See you all in Amsterdam soon!<a href="https://keyconf.dev/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://keyconf.dev/</a>

Neustradamus :xmpp: :linux:<a href="https://mastodon.social/tags/UniventionCorporateServer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UniventionCorporateServer</a> 5.2-2 has been released (<a href="https://mastodon.social/tags/Samba" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Samba</a> / <a href="https://mastodon.social/tags/Keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Keycloak</a> / <a href="https://mastodon.social/tags/UCS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UCS</a> / <a href="https://mastodon.social/tags/Univention" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Univention</a> / <a href="https://mastodon.social/tags/Debian" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Debian</a> / <a href="https://mastodon.social/tags/DebianBookworm" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DebianBookworm</a> / <a href="https://mastodon.social/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a>) <a href="https://www.univention.com/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.univention.com/</a>

Michael Simons<a href="https://foojay.social/@infosec812" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@infosec812</a> Hej Deven, this is what I was building that involved <a href="https://mastodon.social/tags/Keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Keycloak</a>. Now that I have this full end to end integration test, I’m quite happy about the solution<a href="https://github.com/neo4j/neo4j-jdbc/blob/b5bdcdb05368bcc401972f9a8e9fe2cd1eb35bc0/neo4j-jdbc-it/neo4j-jdbc-it-sso/src/test/java/org/neo4j/jdbc/it/sso/ReauthenticationIT.java#L181" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/neo4j/neo4j-jdbc/blob/b5bdcdb05368bcc401972f9a8e9fe2cd1eb35bc0/neo4j-jdbc-it/neo4j-jdbc-it-sso/src/test/java/org/neo4j/jdbc/it/sso/ReauthenticationIT.java#L181</a>

Kevin Veen-BirkenbachCyMaIS statt Workday: Digitale Souveränität für HR & Organisationen Während viele Organisationen sich von Workday begeistern lassen, wird oft übersehen, dass diese Lösung in einer proprietären Blackbox läuft – mit allen Risiken von Vendor-Lock-in, Datenspeicherung in Drittstaaten und hohen Lizenzkosten.Doch es gibt eine echte Alternative: CyMaIS, das freie Framework für selbstbestimmte IT-Infrastruktur. […] <a href="https://blog.cymais.cloud/blog/2025/06/19/cymais-statt-workday-digitale-souveranitat-fur-hr-organisationen/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://blog.cymais.cloud/blog/2025/06/19/cymais-statt-workday-digitale-souveranitat-fur-hr-organisationen/</a>

Michael SimonsWth what kind of <a href="https://mastodon.social/tags/UX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UX</a> is that <a href="https://mastodon.social/tags/Keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Keycloak</a> for crying out load?

Kevin Veen-Birkenbach7 Gründe, warum Bildungseinrichtungen CyMaIS nutzen sollten In einer Welt, in der Bildung zunehmend digitaler wird, stellen sich Schulen die Frage: Wie schützen wir unsere Daten, behalten die Kontrolle und bleiben unabhängig von großen Konzernen?CyMaIS liefert die Antwort – eine selbstgehostete IT-Plattform, speziell für Bildungseinrichtungen. In diesem Artikel zeigen wir Ihnen in 7 klaren Punkten, warum CyMaIS die bessere Alternative zu klassischen Cloudlösungen ist. […] <a href="https://blog.cymais.cloud/blog/2025/06/17/7-grunde-warum-bildungseinrichtungen-cymais-nutzen-sollten/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://blog.cymais.cloud/blog/2025/06/17/7-grunde-warum-bildungseinrichtungen-cymais-nutzen-sollten/</a>

Alexander SchwartzMeet <a href="https://fosstodon.org/tags/Keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Keycloak</a> at KubeCon India in August!Keycloak will be part of this year’s <a href="https://fosstodon.org/tags/KubeCon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#KubeCon</a> edition in <a href="https://fosstodon.org/tags/Hyderabad" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hyderabad</a>, <a href="https://fosstodon.org/tags/India" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#India</a> on August 6-7. A lot of people use Keycloak and develop extensions for Keycloak in India, so we are thrilled to connect with the community. Ping me to have your contributions or projects mentioned in the talk!<a href="https://www.keycloak.org/2025/06/keycloak-kubecon25-india-announce" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.keycloak.org/2025/06/keycloak-kubecon25-india-announce</a>

Silke MeyerInzwischen hatte ich übrigens Zeit, mit dem Keycloak Auditor kcwarden von <a href="https://infosec.exchange/@hacksilon" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@hacksilon</a> und seinem Kollegen herumzuspielen. Ein super Tool, um zu prüfen, wo man die oft sehr laxen Standardeinstellungen nachjustieren sollte!Repo: <a href="https://github.com/iteratec/kcwarden" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/iteratec/kcwarden</a>Vortrag: <a href="https://www.youtube.com/watch?v=PRvHLx5oCj4" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.youtube.com/watch?v=PRvHLx5oCj4</a>(Und hinterher bitte testen, ob alles noch geht, besonders bei den RedirectURIs. 😉)<a href="https://univention.social/tags/keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keycloak</a> <a href="https://univention.social/tags/itsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsecurity</a> <a href="https://univention.social/tags/sso" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sso</a> <a href="https://univention.social/tags/singlesignon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#singlesignon</a> <a href="https://univention.social/tags/freesoftware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#freesoftware</a>

Chris Funderburg52 years, 2 months, 10 days old - and for the first time ever, in a fit of insomnia, I've added basic authentication to a webpage via OpenID via my lab Keycloak server, running on my home Kubernetes cluster via 4 Raspberry Pis. Took about 5 minutes.<a href="https://infosec.exchange/tags/keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keycloak</a> <a href="https://infosec.exchange/tags/raspberrypi" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#raspberrypi</a> <a href="https://infosec.exchange/tags/authentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentication</a> <a href="https://infosec.exchange/tags/homelab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#homelab</a>

pink<a href="https://s.pebcak.de/@winni" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@winni</a> According to the data sheet <a href="https://social.opencloud.eu/@OpenCloud" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@OpenCloud</a> provides <a href="https://norden.social/tags/MFA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MFA</a> natively or through <a href="https://norden.social/tags/Keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Keycloak</a> <a href="https://docs.opencloud.eu/docs/admin/welcome/datasheet#security" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://docs.opencloud.eu/docs/admin/welcome/datasheet#security</a>

Hydrian<a href="https://techhub.social/@ironicbadger" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@ironicbadger</a> I don't think so but I run <a href="https://twit.social/tags/freeipa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#freeipa</a> and <a href="https://twit.social/tags/keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keycloak</a> already…

Sebastian MangelsdorfJust did the chores and kicked out <a href="https://metalhead.club/tags/k3s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#k3s</a>, <a href="https://metalhead.club/tags/longhorn" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#longhorn</a>, <a href="https://metalhead.club/tags/keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keycloak</a> and <a href="https://metalhead.club/tags/tekton" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tekton</a>, hello <a href="https://metalhead.club/tags/authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentik</a> and <a href="https://metalhead.club/tags/hugo" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hugo</a> Less complexity, more fun.

Andi BarthAre there "recommended authentication setups" for <a href="https://muenchen.social/tags/keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keycloak</a>? Seems like I'm a bit lost. I'd like an user to be able to login with any two of password, mailadress, OTP token (and (re)set the third one) - or if only two are set, with any one of them. Or do I hold it wrong? (And if the mail adress is unknow, create the account instead of giving an error.)

Recent searches

Search options

Administered by:

Server stats:

#keycloak