<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
You could write an authenticator plugged in via the auth SPI that
checks client IP and port and not allow connections based on that.<br>
<br>
<div class="moz-cite-prefix">On 4/1/2016 5:46 AM, Guus der Kinderen
wrote:<br>
</div>
<blockquote
cite="mid:CAMJaV9kELWp7bU4Xmh+WQR8TiUoD3ePb=kkDWgOP_x0oriNvYA@mail.gmail.com"
type="cite">
<div dir="ltr">Hello,
<div><br>
</div>
<div>We're working on a setup where we have two realms, a
'master' realm that we use for administration, and another
realm that is public-facing, providing service to our
end-users.</div>
<div><br>
</div>
<div>We'd like to be able to prevent access to the master realm
for the general public. We do not want, for example, to have
the general public be able to access the login page for the
master realm, but we would like them to be able to use to
login page for the other realm. Things will probably get
interesting in the REST interface in that sense.</div>
<div><br>
</div>
<div>Ideally, we would expose each realm on a different network
endpoint (at the very least, use different TCP ports for each
realm). We prefer to avoid a solution that relies on URL /
path-based filtering.</div>
<div><br>
</div>
<div>Can Keycloak facilitate this? Is it possible to limit
exposure of a particular realm to a specific network endpoint?</div>
<div><br>
</div>
<div>Kind regards,</div>
<div><br>
</div>
<div> Guus</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
keycloak-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a>
<a class="moz-txt-link-freetext" href="https://lists.jboss.org/mailman/listinfo/keycloak-user">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Bill Burke
JBoss, a division of Red Hat
<a class="moz-txt-link-freetext" href="http://bill.burkecentral.com">http://bill.burkecentral.com</a></pre>
</body>
</html>