[keycloak-user] Securing keycloak

[GARDAIS Ionel]

Hi list, 

Beside /auth/admin, are there any other URI that should be secured/restricted to limit attack surface for a public facing keycloak ? 

By the way, could it be useful to add a dedicated configuration entry directly inside keycloak to restrict IPs allowed to make to low-level actions ? 

Thanks, 
Ionel 

--
232 avenue Napoleon BONAPARTE 92500 RUEIL MALMAISON
Capital EUR 219 300,00 - RCS Nanterre B 408 832 301 - TVA FR 09 408 832 301
-------------- next part --------------
A non-text attachment was scrubbed...
Name: GARDAIS, Ionel.vcf
Type: text/directory
Size: 399 bytes
Desc: not available
Url : http://lists.jboss.org/pipermail/keycloak-user/attachments/20180916/ddcae4cc/attachment.bin