<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div><span></span></div><div id="yui_3_16_0_1_1421930101327_2518" dir="ltr">That would be great. Thank you vey much Stian. Just to give you more background and provide you my wishlist for the short term. </div><div id="yui_3_16_0_1_1421930101327_2493" dir="ltr">1) Identity brokering that will help us authenticate against diff stores. One of them would be Kerberos (SPNEGO). </div><div id="yui_3_16_0_1_1421930101327_2510" dir="ltr">2) Customization of claims in both SAML as well OpenID Connect responses for each application (client) -similar to what ADFS provides today for SAML. It provides a GUI to choose the store as well as the attributes for each relying party and also to map those attribute names to different values (cn can be mapped to "Name" for one client and "Full Name" for another) which will be reflected in the claims sent to the relying party.</div><div id="yui_3_16_0_1_1421930101327_2529" dir="ltr">3) OpenID Connect Interop (Today some of the endpoints do not fully adhere to the Spec)</div><div id="yui_3_16_0_1_1421930101327_2494" dir="ltr"><br></div><div id="yui_3_16_0_1_1421930101327_2498" dir="ltr">I believe you have all the above requests in your queue for 1.2 release or later but would appreciate if you can squeeze them in the next cycle of binaries.</div><div id="yui_3_16_0_1_1421930101327_2687" dir="ltr"><br></div><div dir="ltr">Regards,</div><div id="yui_3_16_0_1_1421930101327_2688" dir="ltr">Raghu</div><div id="yui_3_16_0_1_1421930101327_2462" style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div id="yui_3_16_0_1_1421930101327_2461" style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div id="yui_3_16_0_1_1421930101327_2460" dir="ltr"> <hr size="1" id="yui_3_16_0_1_1421930101327_2482"> <font id="yui_3_16_0_1_1421930101327_2459" face="Arial" size="2"> <b><span style="font-weight: bold;">From:</span></b> Stian Thorgersen <stian@redhat.com><br> <b><span style="font-weight: bold;">To:</span></b> Raghuram Prabhala <prabhalar@yahoo.com> <br><b><span style="font-weight: bold;">Cc:</span></b> Bill Burke <bburke@redhat.com>; keycloak-user@lists.jboss.org <br> <b><span style="font-weight: bold;">Sent:</span></b> Thursday, January 22, 2015 2:24 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [keycloak-user] Delegated SAML authentication?<br> </font> </div> <div class="y_msg_container" id="yui_3_16_0_1_1421930101327_2471"><br><br clear="none"><br clear="none">----- Original Message -----<br clear="none">> From: "Raghuram Prabhala" <<a href="mailto:prabhalar@yahoo.com" shape="rect" ymailto="mailto:prabhalar@yahoo.com">prabhalar@yahoo.com</a>><br clear="none">> To: "Bill Burke" <<a href="mailto:bburke@redhat.com" shape="rect" ymailto="mailto:bburke@redhat.com">bburke@redhat.com</a>><br clear="none">> Cc: <a href="mailto:keycloak-user@lists.jboss.org" shape="rect" ymailto="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br clear="none">> Sent: Wednesday, January 21, 2015 6:05:30 PM<br clear="none">> Subject: Re: [keycloak-user] Delegated SAML authentication?<br clear="none">> <br clear="none">> Bill - identity brokering is something that we need today. Is it possible to<br clear="none">> release an alpha or beta version of that functionality earlier than March so<br clear="none">> that we can start integration work now? Unfortunately we can't build from<br clear="none">> source and look for binaries from you.<br clear="none"><br clear="none">Once we have 1.1.0.Final released, which is hopefully this or next week, we should be able to release something.<br clear="none"><br clear="none">> <br clear="none">> Thanks<br clear="none">> Raghu<br clear="none">> <br clear="none">> Sent from my iPhone<br clear="none">> <br clear="none">> > On Jan 21, 2015, at 9:45 AM, Bill Burke <<a href="mailto:bburke@redhat.com" shape="rect" ymailto="mailto:bburke@redhat.com">bburke@redhat.com</a>> wrote:<br clear="none">> > <br clear="none">> > Pedro has it working in master. Won't be release until like March<br clear="none">> > though probably.<br clear="none">> > <br clear="none">> >> On 1/21/2015 1:21 AM, Stian Thorgersen wrote:<br clear="none">> >> <br clear="none">> >> <br clear="none">> >> ----- Original Message -----<br clear="none">> >>> From: "Guy Davis" <<a href="mailto:guydavis.ca@gmail.com" shape="rect" ymailto="mailto:guydavis.ca@gmail.com">guydavis.ca@gmail.com</a>><br clear="none">> >>> To: <a href="mailto:keycloak-user@lists.jboss.org" shape="rect" ymailto="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br clear="none">> >>> Sent: Wednesday, 21 January, 2015 6:08:50 AM<br clear="none">> >>> Subject: [keycloak-user] Delegated SAML authentication?<br clear="none">> >>> <br clear="none">> >>> Good day,<br clear="none">> >>> <br clear="none">> >>> With the upcoming Keycloak 1.10, I see SAML support has been added to<br clear="none">> >>> KeyCloak. Will it be possible to have Keycloak delegate to another IDP<br clear="none">> >>> such<br clear="none">> >>> as MS Azure ADFS or OneLogin? Ideally, I'd like to use KeyCloak by<br clear="none">> >>> default<br clear="none">> >>> for our JBoss deployments, but in certain cases, customers are asking for<br clear="none">> >>> integration with the MS Azure cloud authentication mechanisms.<br clear="none">> >> <br clear="none">> >> It won't work for 1.1.0. We're working on that (identity brokering) for<br clear="none">> >> 1.2.0 where you'll be able to delegate to external OpenID Connect or SAML<br clear="none">> >> IdP's.<br clear="none">> >> <br clear="none">> >>> <br clear="none">> >>> Thanks in advance,<br clear="none">> >>> Guy<br clear="none">> >>> <br clear="none">> >>> _______________________________________________<br clear="none">> >>> keycloak-user mailing list<br clear="none">> >>> <a href="mailto:keycloak-user@lists.jboss.org" shape="rect" ymailto="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br clear="none">> >>> <a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank" shape="rect">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br clear="none">> >> _______________________________________________<br clear="none">> >> keycloak-user mailing list<br clear="none">> >> <a href="mailto:keycloak-user@lists.jboss.org" shape="rect" ymailto="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br clear="none">> >> <a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank" shape="rect">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br clear="none">> > <br clear="none">> > --<br clear="none">> > Bill Burke<br clear="none">> > JBoss, a division of Red Hat<br clear="none">> > <a href="http://bill.burkecentral.com/" target="_blank" shape="rect">http://bill.burkecentral.com</a><div class="qtdSeparateBR"><br><br></div><div class="yqt9913080275" id="yqtfd62725"><br clear="none">> > _______________________________________________<br clear="none">> > keycloak-user mailing list<br clear="none">> > <a href="mailto:keycloak-user@lists.jboss.org" shape="rect" ymailto="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br clear="none">> > <a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank" shape="rect">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br clear="none">> <br clear="none">> _______________________________________________<br clear="none">> keycloak-user mailing list<br clear="none">> <a href="mailto:keycloak-user@lists.jboss.org" shape="rect" ymailto="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br clear="none">> <a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank" shape="rect">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br clear="none">> <br clear="none"></div><br><br></div> </div> </div> </div></body></html>