<div dir="ltr"><div>My goal is to have several web services (which reside at <a href="http://sub1.domain.com">sub1.domain.com</a>, <a href="http://sub2.domain.com">sub2.domain.com</a>, etc.) all redirect users to <a href="http://auth.domain.com">auth.domain.com</a>
for login. When a user is logged in and visits one of the web services,
the web service should be able to get the user's identity from a claim
signed by the authentication service (keycloak). The only way I know of
to do this is to pass a claim in a cookie.<br><br></div><div>Ideally,
the web service should be able to verify the identity claim without
needing to emit an HTTP request to the auth service (by verifying the
signature against the realm's public key).<br></div><div><br></div>Is keycloak the right choice for this? and if not, do you have any recommendations?<div class="gmail_extra"><br><div class="gmail_quote">On Mon, Oct 26, 2015 at 9:49 AM, Marek Posolda - <a href="mailto:mposolda@redhat.com">mposolda@redhat.com</a> <span dir="ltr"><<a href="mailto:keycloak-user.myq.aa3199607d.mposolda#redhat.com@ob.0sg.net" target="_blank">keycloak-user.myq.aa3199607d.mposolda#redhat.com@ob.0sg.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<div>This doesn't seem to be supported.
Question is why you need it? All the cookies like
KEYCLOAK_IDENTITY are set by keycloak server and it's just the
keycloak server, which is supposed to read them.<br>
<br>
Marek<br>
<br>
On 26/10/15 14:26, <a href="mailto:keycloak-user.myq@xoxy.net" target="_blank">keycloak-user.myq@xoxy.net</a> wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div>Hello. How can I set the domain of session cookies?<br>
<br>
I want to run keycloak at <a href="http://auth.mydomain.com" target="_blank">auth.mydomain.com</a> and
get the session cookies (for SSO) at other subdomains of <a href="http://mydomain.com" target="_blank">mydomain.com</a>.<br>
<br>
Browsers will allow <a href="http://sub.domain.com" target="_blank">sub.domain.com</a> to set
cookies for <a href="http://domain.com" target="_blank">domain.com</a>, but I can't figure
out how to get Keycloak to do this.<br>
<br>
</div>
Thanks in advance!</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
keycloak-user mailing list
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br>
</div>
</blockquote></div><br></div></div>