----- Original Message -----
From: "Thomas Raehalme"
<thomas.raehalme(a)aitiofinland.com>
To: "Bill Burke" <bburke(a)redhat.com>
Cc: "keycloak-dev" <keycloak-dev(a)lists.jboss.org>
Sent: Sunday, 16 August, 2015 12:41:06 PM
Subject: Re: [keycloak-dev] Abstract SMS support
Hi!
Sounds good!
However it might be a good idea to include a generic HTTP/REST implementation
which you could configure through the admin interface to deliver SMS
messages to any service supporting HTTP? I'm pretty sure this would satisfy
most users.
Not sure how that would work. AFAIK SMS providers have their own proprietary rest
endpoints as well as authentication mechanisms so I don't see how we could create a
generic implementation.
What do you think?
Best regards,
Thomas
On Aug 16, 2015 1:06 AM, "Bill Burke" < bburke(a)redhat.com > wrote:
I was thinking that we would create abstract support for SMS support for
Keycloak. We would define a simple Provider interface for sending text
messages. We would not provide anything out of the box for now. We
would require users to implement their own SMS provider and plug it in.
Basically, we'd have an SMS OTP Authenticator for both the browser login
and reset-credentials flows. Keycloak would just send an SMS with a
one-time secret code that you have to enter in. We also would implement
a validate mobile number required action too.
I don't think any of this would take very long (a day or two?) once I
get the reset-credential pluggable-flow support done.
Later on, maybe its something we could integrate with Aerogear UPS out
of the box?
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev