Single sign on (SSO) with Keycloak + Active Directory + Angular | Microservice Security Practical

In current enterprise architecture, every system we are designing/developing usually has hundreds of thousands of users. so recreate those users on our system is an obvious outdated strategy.
also, asking for their credential, again and again, is a bad user experience. instead of we can use their local workstation credentials, domain account, Facebook, Google, Apple such account then it will be a very rich user experience.
in this video, I am going to demonstrate how we can do that single sign-on feature practically. for that, I am using Active directory which is the most used directory service, and keycloak which is most popular open-source free Authorization server, and Angular which is known to the most famous front-end framework.

#krish #KrishDinesh #MicroserviceSecurity

Pre-requisites :

Stay in touch:

[tharangawijeweera]

The way you explained is great and easy to understand. The knowledge that was shared helped me to get a clear picture, which filled the gaps of the knowledge I had. Thank you so much.

[shishirroy]

I must say. it's an excellent session. Can you create a series or session on [Keycloak+ Service provider init & Identity provider] using SAML

[sushaindilishan]

You re literally throwing money stacks at people to catch...!! :D :D Thank you.

[jdkasdf]

Very nice explanation. Can we do it other way around. Keycloack as IDP and Microsoft Service like power BI as Service provider.

[binarytech]

Interesting product. Can it be used for managing access to Windows servers?

[kalhariliyanagama]

Hi, I found your channel when searching for Keycloak/AD content. First I thought you're Indian (Krish :) ) and was pleasantly surprised that you are a fellow Lankan. I haven't seen many Sri Lankans doing tech content. Nice work and keep it up. A question though, if the we want to integrate keycloak with another org's AD, we cannot use the identity broker option right, if ADFS is used then yes we can integrate ADFS as the identity provider, otherwise we will have to use the user federation isnt it? Second Q: If we integrate AD with user federation or ADFS as an Identity Provider, does it provide SSO? I'm guessing no

[nareshreddygondewar]

Hi Krish, It's a great video from you and thanks sharing valuable content with us . Could you please make a video for user federation if you already post . Kindy share the url please . Thanks a lot .

[thatoshebe]

When are you making the video on policies?

[sunils]

Awsum video. learnt a lot! please make a video on user federation as well.

[solardepotnigeria]

Thank you for taking your time to do this video. Could you share insight on how to integrate keycloak with Apache Drupal site using Active Directory /LDAP as authentication method. Thanks

[matjazhafner]

Great video. Is it possible to restrict access depends on groups/roles? Lets say we have 2 groups in azure ad (users and admins). Only admins can create new users. Users from user group can only list users.

[hyprvirus]

how to make a trust between Keycloak and Kerberos realm not to use redirection to KDC site? I don't want to authenticate twice using my OpenID password and Kerberos password for non-gssapi and spnego services. For example using Active Directory - FreeIPA two-ways trust it is enough to be authenticated by only one realm to connect to a service of another realm.

[AshinsanaMayuminda]

can u do an another for LDAP and kerberos

[cisco]

Great Video Sir, this is really a savior for my scenario, immediately subscribed the channel
Please make a video on User federation, if already uploaded, then please share the link
Also, I want to take keycloak training, please suggest how to contact you

[sandeeprao]

Hi Sir, Do you have this angular code with keycloak integration in github?

[TataRaog-djww]

please do full course in pingfederate sir

[savitrigalatge]

Hi, actually we integrated keycloak with angular using oauth2 but aftr that token api is not getting .??? Please help me to out from this issue. 🙏🏻

[MohammadAli-ptjq]

This was really helpful in terms of understanding Keycloak integration. I have couple of doubts in this, regard hope you will guide me or atleast give me solution. I'm planning to implement SSO using Keycloak. We have two different products contains mobile and web. Two products have their own database. Now Product1 users should be able to access Product2 and vice versa. What is best approach? In this scenario does SSO solve our problem? If so how do i approach since two isolated. databases. Could you please guide me or help in understand the solution. And since users already using product we should not ask them register, should be able to use as even with SSO. Thanks in advnce and thanks for the wonderful videos.

[shobie]

Any help about CORS issue in Keycloak?

[sonujha]

is there any way to skip the keycloak login theme and put it there domain input field where the user enter the company domain and if its valid then they will be redirected to microsoft azure login portal and there they enter the credential and get logged in