<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div><span>Wildfly makes a number of login modules available as a part of the Security sub system that include SPNEGO (see the link below). Since Keycloak supports defining new Realms, if you can provide some hooks to map the newly defined Realms to the Security sub system, I think it would address the issue. Picketlink examples shed some light on how it can be done.</span></div><div style="color: rgb(0, 0, 0); font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px; font-style: normal; background-color: transparent;"><br></div><div style="color: rgb(0, 0, 0); font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px; font-style: normal; background-color: transparent;"><a
href="https://docs.jboss.org/author/display/WFLY8/Security+subsystem+configuration">https://docs.jboss.org/author/display/WFLY8/Security+subsystem+configuration</a></div><div> </div> <div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" style="display: block;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"> <font face="Arial" size="2"> On Saturday, October 11, 2014 8:53 AM, Bill Burke <bburke@redhat.com> wrote:<br> </font> </div> <br><br> <div>Kerberos is on our roadmap as there's some other Red Hat kerberos <br clear="none">products we need to integrate wit. I don't understand Kerberos deep <br clear="none">enough yet to know exactly what or how we would do it. My current <br clear="none">thought that the
Keycloak auth server would be a secured Kerberos <br clear="none">service and become a bridge between kerberos and SAML or OpenID Connect.<br clear="none"><br clear="none">On 10/10/2014 5:24 PM, Raghuram wrote:<br clear="none">> Can I put in an enhancement request for at least some hooks as I am not sure how a custom federation provider could be written for SPNEGO negotiation. This feature will be useful for all organizations that invested in Kerberos infrastructure.<br clear="none">><br clear="none">>> On Oct 10, 2014, at 5:11 PM, Bill Burke <<a href="mailto:bburke@redhat.com" shape="rect" ymailto="mailto:bburke@redhat.com">bburke@redhat.com</a>> wrote:<br clear="none">>><br clear="none">>> we don't support kerberos.<br clear="none">>><br clear="none">>>> On 10/10/2014 5:06 PM, Raghuram wrote:<br clear="none">>>><br clear="none">>>>> Has anyone tried out SPNEGO (Kerberos) authentication
with key cloak<br clear="none">>>>> 1.0.2? If so, appreciate any input on how it can be achieved?<br clear="none">>>><br clear="none">>>> Sent from my iPhone<br clear="none">>>><br clear="none">>>><br clear="none">>>> _______________________________________________<br clear="none">>>> keycloak-user mailing list<br clear="none">>>> <a href="mailto:keycloak-user@lists.jboss.org" shape="rect" ymailto="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br clear="none">>>> <a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank" shape="rect">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br clear="none">>><br clear="none">>> --<br clear="none">>> Bill Burke<br clear="none">>> JBoss, a division of Red Hat<br clear="none">>> <a href="http://bill.burkecentral.com/" target="_blank"
shape="rect">http://bill.burkecentral.com/</a><div id="yqtfd39127"><br clear="none">>> _______________________________________________<br clear="none">>> keycloak-user mailing list<br clear="none">>> <a href="mailto:keycloak-user@lists.jboss.org" shape="rect" ymailto="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br clear="none">>> <a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank" shape="rect">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br clear="none"><br clear="none">-- <br clear="none">Bill Burke<br clear="none">JBoss, a division of Red Hat<br clear="none"><a href="http://bill.burkecentral.com/" target="_blank" shape="rect">http://bill.burkecentral.com/</a><br clear="none"></div><br><br></div> </div> </div> </div> </div></body></html>