<div dir="ltr">Keycloak is not FIPS compliant. There's basically two parts that would need to be made FIPS compliant:<div><br></div><div>* SSL - this should be possible at the moment, Google for FIPS and WildFly or EAP to see how to configure it</div><div>* OIDC/SAML - we use Bouncycastle for crypt which is not FIPS compliant, but looking at <a href="http://www.bouncycastle.org/wiki/display/JA1/Frequently+Asked+Questions">http://www.bouncycastle.org/wiki/display/JA1/Frequently+Asked+Questions</a> they have a FIPS compliant version in place</div></div><div class="gmail_extra"><br><div class="gmail_quote">On 28 September 2015 at 23:27, Bhanu Kiran <span dir="ltr"><<a href="mailto:getbhanu30@gmail.com" target="_blank">getbhanu30@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><p class="MsoNormal"><span style="font-size:12pt;font-family:Arial,sans-serif;background-image:initial;background-repeat:initial">Team,</span><span style="font-size:12pt;font-family:'Times New Roman',serif"></span></p>
<p class="MsoNormal"><span style="font-size:12pt;font-family:Arial,sans-serif"> </span></p>
<p class="MsoNormal"><span style="font-size:12pt;font-family:Arial,sans-serif">Please let us know if
Keycloak is FIPS complained or how we can implement FIPS in keycloak ?</span></p>
<p class="MsoNormal"><span style="font-size:12pt;font-family:Arial,sans-serif"> </span></p>
<p class="MsoNormal"><span style="font-size:12pt;font-family:Arial,sans-serif">Thanks</span></p></div>
<br>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div><br></div>