[keycloak-user] Customize Themes by Client

Stian Thorgersen sthorger at redhat.com
Tue Aug 16 04:19:44 EDT 2016


Josh - could you describe your use case please? It just doesn't make any
sense to me to have the login screen change depending on the client as you
are not authenticating with a specific client rather with a SSO server.

On 28 July 2016 at 22:53, Josh Cain <josh.cain at redhat.com> wrote:

> Sounds good!  KEYCLOAK-3370 filed, the only thing I think we might have to
> discuss is how configuration of said SPI extension would work.  We're
> trying to keep out-of-band configs to a minimum, and something like an SPI
> would still have to be configured against clients in any particular realm,
> which would make the GUI seem like an appropriate choice for the
> configuration (IMO anyway).
>
> I'll take the discussion there, thanks for pointing me in the right
> direction.
>
>
> Josh Cain | Software Applications Engineer
> *Identity and Access Management*
> *Red Hat*
> +1 843-737-1735
>
> On Thu, Jul 28, 2016 at 3:37 PM, Bruno Oliveira <bruno at abstractj.org>
> wrote:
>
>> Hi Josh, some answers inline.
>>
>> On 2016-07-28, Josh Cain wrote:
>> > Bruno,
>> >
>> > Thanks for the link!  Wasn't on this list when it was discussed.  So if
>> I
>> > understand the thread correctly:
>> >
>> >    - This feature has already been given a 'No' response by the Keycloak
>> >    team.
>>
>> I'd say yes/no. From what I understood on that thread Stian suggested to
>> expose a theme SPI. Which gives more flexibility.
>>
>> >    - Best way to implement client-specific theme functionality, as per
>> the
>> >    thread, is to use the client variable + conditionals in the template
>> to
>> >    change how a page renders.
>>
>> At the moment yes, you are correct.
>>
>> >
>> > I'm a bit disappointed - I also have this requirement.  Don't want to go
>> > back through and re-hash the reasons why (most were already covered on
>> the
>> > previous thread), but a client config for a theme would be immensely
>> > helpful.
>> >
>> > As a side note, I'll be doing the work to either a) provide a mechanism
>> for
>> > clients to arbitrarily theme the login template, or b) allow clients to
>> > select a login theme in Keycloak proper.  I'd much prefer b), but it
>> looks
>> > like a) might be my only option...
>>
>> Wouldn't the theme SPI sufficient for your use cases? If yes, I'd
>> suggest to file a Jira and maybe start a thread at keycloak-dev. Stian
>> is not here and I cannot speak on his behalf. But based on that thread
>> I believe that having a theme SPI is a fair request.
>>
>> >
>> >
>> > Josh Cain | Software Applications Engineer
>> > *Identity and Access Management*
>> > *Red Hat*
>> > +1 843-737-1735
>> >
>> > On Thu, Jul 28, 2016 at 11:36 AM, Bruno Oliveira <bruno at abstractj.org>
>> > wrote:
>> >
>> > > Hi Josh, there was a discussion about it here[1].
>> > >
>> > > [1] -
>> > > http://lists.jboss.org/pipermail/keycloak-user/2016-
>> January/004288.html
>> > >
>> > > On 2016-07-28, Josh Cain wrote:
>> > > > Hi All,
>> > > >
>> > > > I've got some SP's that want the ability to customize the look/feel
>> of
>> > > the
>> > > > login page.  Couldn't find anything on the docs/jira site, but was
>> > > curious
>> > > > as to whether:
>> > > >
>> > > >    - Keycloak currently supports login themes by client
>> > > >    - If not, would the team be open to such a feature?
>> > > >
>> > > >
>> > > > Josh Cain | Software Applications Engineer
>> > > > *Identity and Access Management*
>> > > > *Red Hat*
>> > > > +1 843-737-1735
>> > >
>> > > > _______________________________________________
>> > > > keycloak-user mailing list
>> > > > keycloak-user at lists.jboss.org
>> > > > https://lists.jboss.org/mailman/listinfo/keycloak-user
>> > >
>> > >
>> > > --
>> > >
>> > > abstractj
>> > > PGP: 0x84DC9914
>> > >
>>
>> --
>>
>> abstractj
>> PGP: 0x84DC9914
>>
>
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160816/e44fb1e4/attachment.html 


More information about the keycloak-user mailing list