[keycloak-dev] Kerberos, login with different user

Bill Burke bburke at redhat.com
Mon Oct 5 09:10:38 EDT 2015



On 10/5/2015 3:39 AM, Stian Thorgersen wrote:
> I don't think the account chooser is a good option. As you say users
> that login with Kerberos (and have enabled Kerberos for the Keycloak
> domain) will in 99% cases want to login with Kerberos.
>

Is logging out of Kerberos a big deal?  I have no idea.  Never in my 
career have I had to log in via kerberos.

> End of the day I don't really like any of these options, and so far
> Michael is the only person asking for something like this. With that in
> mind I think it's better that Michael would develop something custom on
> top of the authenticator spi, rather than us adding this to Keycloak.
>

I agree, but an account chooser would be a nice feature to add the way I 
described it.  We got a lot of other stuff to do though that has higher 
priority.


-- 
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com


More information about the keycloak-dev mailing list