[keycloak-dev] combine proxy and keycloak server

[Marc Boorshtein]

>
> There's also plenty of options around proxies (Apache, nginx, APIMan,
> 3scale, etc.). I'm not convinced we should even have our own. Sounds like
> APIMan might actually survive and end up being supported in some form, so
> that may still be a better option to us rolling our own proxy/gateway.
>

For what its worth, OpenUnison could play this role with KC where
OpenUnison does the integration with with applications and KC via OIDC
or SAML2 (I'm working on a POC right now using KC for authentication,
MyVirtualDirectory for multi directory access and OpenUnison/ScaleJS
for provisioning/Reverse Proxy) with Kubernetes and its working great.
We already have a powerful LastMile system for application integration
that lets us integrate with J2EE, LAMP and .NET applications.  The
integration between OpenUnison and KC took me about 5 minutes.  We
have source2image that makes the deployment even easier.


-
Marc Boorshtein
CTO Tremolo Security
marc.boorshtein at tremolosecurity.com
Twitter - @mlbiam / @tremolosecurity