5:30 p.m.
Hello guys!
I'm trying to implement Keycloak in my solution, but it turns out that I
need to have a completely different login page per application in the
same Realm. Keycloak allows me to create themes, but only at Realm
level, not at Application level.
How would you guys suggest me approaching this? Any plans to develop
such a feature or ways to work around it?
Thanks in advance!
--
Atenciosamente,
Marcio Fernandes de Lima
http://linkedin.com/in/marcioferlan
SCJP, SCWCD, MySQL Core Certified
1:14 a.m.
When a user logs in the user logs in to the realm, not the application. So it doesn't
make sense to have different login pages per application.
----- Original Message -----
From: "Marcio Lima" <marcioferlan(a)gmail.com>
To: keycloak-dev(a)lists.jboss.org
Sent: Thursday, 7 May, 2015 11:30:46 PM
Subject: [keycloak-dev] Themes per application
Hello guys!
I'm trying to implement Keycloak in my solution, but it turns out that I
need to have a completely different login page per application in the
same Realm. Keycloak allows me to create themes, but only at Realm
level, not at Application level.
How would you guys suggest me approaching this? Any plans to develop
such a feature or ways to work around it?
Thanks in advance!
--
Atenciosamente,
Marcio Fernandes de Lima
http://linkedin.com/in/marcioferlan
SCJP, SCWCD, MySQL Core Certified
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
3:57 a.m.
I have a similar use case which I addressed overriding the ftl file and
selecting different template based on clientid:
<#if client?? && client.clientId?contains('client_x')>
<#import "client_x/template.ftl" as layout>
<#else>
<#import "template.ftl" as layout>
</#if>
It works pretty well with login and register template. You won't be able
to customize per application the reset password and error template, though.
My use case is that I manage a service and there are several resellers
for this service. Each reseller has its own branded application and want
some branding on the login and register page as well.
Hope this helps.
stefano
Il 08/05/2015 07:14, Stian Thorgersen ha scritto:
When a user logs in the user logs in to the realm, not the
application. So it doesn't make sense to have different login pages per application.
----- Original Message -----
> From: "Marcio Lima" <marcioferlan(a)gmail.com>
> To: keycloak-dev(a)lists.jboss.org
> Sent: Thursday, 7 May, 2015 11:30:46 PM
> Subject: [keycloak-dev] Themes per application
>
> Hello guys!
>
> I'm trying to implement Keycloak in my solution, but it turns out that I
> need to have a completely different login page per application in the
> same Realm. Keycloak allows me to create themes, but only at Realm
> level, not at Application level.
>
> How would you guys suggest me approaching this? Any plans to develop
> such a feature or ways to work around it?
>
> Thanks in advance!
> --
>
> Atenciosamente,
>
> Marcio Fernandes de Lima
> http://linkedin.com/in/marcioferlan
> SCJP, SCWCD, MySQL Core Certified
>
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
--
*Stefano Travelli*
*Entaksi Solutions srl*
Via la Piana 76 - fraz. Pontepetri -
51028 San Marcello Pistoiese (PT)
P.IVA 01621900479
http://www.entaksi.eu <blocked::http://www.entaksi.eu/>
*AZIENDA CON SISTEMA INTEGRATO **DI GESTIONE*
*QUALITÀ**, SICUREZZA DELLE INFORMAZIONI, SERVIZI IT*
*CERTIFICATO DA DNV**·**GL***
*=**ISO 9001 **= **ISO **27**001 **=**ISO **2**0**00**0 **=*
La presente comunicazione ha natura non personale e le risposte
potrebbero essere conosciute nell'organizzazione di appartenenza da più
soggetti anche diversi dal mittente. Il messaggio e ogni documento o
file allegato è strettamente riservato ed è rivolto unicamente alla/e
persona/e o Enti cui è indirizzata, ed alle altre/i da questi ultimi
autorizzate a riceverlo. Sono vietate la diffusione, la distribuzione e
la copia delle informazioni qui contenute da parte di soggetti non
espressamente autorizzati.Se avete ricevuto questa e-mail per errore Vi
preghiamo di eliminarla dai Vostri archivi e darne comunicazione al
mittente.
4:11 a.m.
----- Original Message -----
From: "Stefano Travelli"
<stefano.travelli(a)entaksi.eu>
To: keycloak-dev(a)lists.jboss.org
Sent: Friday, 8 May, 2015 9:57:50 AM
Subject: Re: [keycloak-dev] Themes per application
I have a similar use case which I addressed overriding the ftl file and
selecting different template based on clientid:
<#if client?? && client.clientId?contains('client_x')>
<#import "client_x/template.ftl" as layout>
<#else>
<#import "template.ftl" as layout>
</#if>
It works pretty well with login and register template. You won't be able to
customize per application the reset password and error template, though.
My use case is that I manage a service and there are several resellers for
this service. Each reseller has its own branded application and want some
branding on the login and register page as well.
In that case how does it make sense that users log in to one reseller, but then later when
visit another reseller are automatically logged in due to SSO.
Hope this helps.
stefano
Il 08/05/2015 07:14, Stian Thorgersen ha scritto:
When a user logs in the user logs in to the realm, not the application. So it
doesn't make sense to have different login pages per application.
----- Original Message -----
From: "Marcio Lima" <marcioferlan(a)gmail.com> To:
keycloak-dev(a)lists.jboss.org
Sent: Thursday, 7 May, 2015 11:30:46 PM
Subject: [keycloak-dev] Themes per application
Hello guys!
I'm trying to implement Keycloak in my solution, but it turns out that I
need to have a completely different login page per application in the
same Realm. Keycloak allows me to create themes, but only at Realm
level, not at Application level.
How would you guys suggest me approaching this? Any plans to develop
such a feature or ways to work around it?
Thanks in advance!
--
Atenciosamente,
Marcio Fernandes de Lima http://linkedin.com/in/marcioferlan SCJP, SCWCD,
MySQL Core Certified
_______________________________________________
keycloak-dev mailing list keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
_______________________________________________
keycloak-dev mailing list keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
--
Stefano Travelli
Entaksi Solutions srl
Via la Piana 76 - fraz. Pontepetri -
51028 San Marcello Pistoiese (PT)
P.IVA 01621900479
http://www.entaksi.eu
AZIENDA CON SISTEMA INTEGRATO DI GESTIONE
QUALITÀ , SICUREZZA DELLE INFORMAZIONI, SERVIZI IT
CERTIFICATO DA DNV · GL
= ISO 9001 = ISO 27 001 = ISO 2 0 00 0 =
La presente comunicazione ha natura non personale e le risposte potrebbero
essere conosciute nell'organizzazione di appartenenza da più soggetti anche
diversi dal mittente. Il messaggio e ogni documento o file allegato è
strettamente riservato ed è rivolto unicamente alla/e persona/e o Enti cui è
indirizzata, ed alle altre/i da questi ultimi autorizzate a riceverlo. S ono
vietate l a diffusione, la distribuzione e la copia delle informazioni qui
contenute da parte di soggetti non espressamente autorizzati. Se avete
ricevuto questa e-mail per errore Vi preghiamo di eliminarla dai Vostri
archivi e darne comunicazione al mittent e.
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
4:49 a.m.
Il 08/05/2015 10:11, Stian Thorgersen ha scritto:
----- Original Message -----
> From: "Stefano Travelli" <stefano.travelli(a)entaksi.eu>
> To: keycloak-dev(a)lists.jboss.org
> Sent: Friday, 8 May, 2015 9:57:50 AM
> Subject: Re: [keycloak-dev] Themes per application
>
> I have a similar use case which I addressed overriding the ftl file and
> selecting different template based on clientid:
>
> <#if client?? && client.clientId?contains('client_x')>
> <#import "client_x/template.ftl" as layout>
> <#else>
> <#import "template.ftl" as layout>
> </#if>
>
> It works pretty well with login and register template. You won't be able to
> customize per application the reset password and error template, though.
>
> My use case is that I manage a service and there are several resellers for
> this service. Each reseller has its own branded application and want some
> branding on the login and register page as well.
In that case how does it make sense that users log in to one reseller, but then later
when visit another reseller are automatically logged in due to SSO.
It doesn't, and I'm not asking for a specific handling of themes per
application in keycloak. My users are aware that they are logging in to
my service, but since they pay the reseller in order to access it, the
reseller likes to have its logo in the login and register page.
Having the clientId in the template is nice enough for me. Unfortunately
it is not available in the reset password and error page, maybe for good
reasons. I will try to dig into the code.
stefano
> Hope this helps.
> stefano
>
> Il 08/05/2015 07:14, Stian Thorgersen ha scritto:
>
>
>
> When a user logs in the user logs in to the realm, not the application. So it
> doesn't make sense to have different login pages per application.
>
> ----- Original Message -----
>
>
>
> From: "Marcio Lima" <marcioferlan(a)gmail.com> To:
keycloak-dev(a)lists.jboss.org
> Sent: Thursday, 7 May, 2015 11:30:46 PM
> Subject: [keycloak-dev] Themes per application
>
> Hello guys!
>
> I'm trying to implement Keycloak in my solution, but it turns out that I
> need to have a completely different login page per application in the
> same Realm. Keycloak allows me to create themes, but only at Realm
> level, not at Application level.
>
> How would you guys suggest me approaching this? Any plans to develop
> such a feature or ways to work around it?
>
> Thanks in advance!
> --
>
> Atenciosamente,
>
> Marcio Fernandes de Lima http://linkedin.com/in/marcioferlan SCJP, SCWCD,
> MySQL Core Certified
>
> _______________________________________________
> keycloak-dev mailing list keycloak-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
> _______________________________________________
> keycloak-dev mailing list keycloak-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
> --
8:15 a.m.
Hi Stian, thanks for the quick response!
I do agree the login happens at Realm level and that shouldn't and won't
change.
However, in my case, the applications in that Realm are different.
I basically see the following options to workaround it:
1. *Create one theme with **<#if>**blocks for each application*
In this case I would need to change this template if a new
application comes in or when something changes in any of the login
pages (blocks).
2. *Dinamically load login pages from the theme page**
*I ran this test and it worked just fine, but, I felt like I
shouldn't be doing it this way... bad smell, you know? (:P)
The theme login page loads a static login page of each application
using the *client_id* variable. Then, places the contents on the
current page and sets the necessary elements to Keycloak expected
values (like form action, forgot password and register user links
URLs, error messages, etc).
For each new application, all I have to do is create the static
resources in a */themes/${client_id}* folder, with the correct
element IDs and it does the trick.
Of course there are some drawbacks, but it turns out that I have now
3 applications using this approach. I wish I could have
per-application themes, rather.
3. *Convince my client to use the same login page for all applications**
*This would be the standard approach, but, unfortunatelly, isn't an
option for me.
Any thoughts on that?
Thanks in advance.
Regards,
Marcio Fernandes de Lima
http://linkedin.com/in/marcioferlan
SCJP, SCWCD, MySQL Core Certified
On 08/05/2015 02:14, Stian Thorgersen wrote:
When a user logs in the user logs in to the realm, not the
application. So it doesn't make sense to have different login pages per application.
----- Original Message -----
> From: "Marcio Lima" <marcioferlan(a)gmail.com>
> To: keycloak-dev(a)lists.jboss.org
> Sent: Thursday, 7 May, 2015 11:30:46 PM
> Subject: [keycloak-dev] Themes per application
>
> Hello guys!
>
> I'm trying to implement Keycloak in my solution, but it turns out that I
> need to have a completely different login page per application in the
> same Realm. Keycloak allows me to create themes, but only at Realm
> level, not at Application level.
>
> How would you guys suggest me approaching this? Any plans to develop
> such a feature or ways to work around it?
>
> Thanks in advance!
> --
>
> Atenciosamente,
>
> Marcio Fernandes de Lima
> http://linkedin.com/in/marcioferlan
> SCJP, SCWCD, MySQL Core Certified
>
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
1:21 a.m.
1 is the best option (well 3 obviously ;))
Beyond making client_id available we're not going to add any specific support for a
theme per-client as it just doesn't make sense. Give me a good use-case for it and we
can re-consider though.
----- Original Message -----
From: "Marcio Lima" <marcioferlan(a)gmail.com>
To: "Stian Thorgersen" <stian(a)redhat.com>
Cc: keycloak-dev(a)lists.jboss.org
Sent: Friday, 8 May, 2015 2:15:32 PM
Subject: Re: [keycloak-dev] Themes per application
Hi Stian, thanks for the quick response!
I do agree the login happens at Realm level and that shouldn't and won't
change.
However, in my case, the applications in that Realm are different.
I basically see the following options to workaround it:
1. *Create one theme with **<#if>**blocks for each application*
In this case I would need to change this template if a new
application comes in or when something changes in any of the login
pages (blocks).
2. *Dinamically load login pages from the theme page**
*I ran this test and it worked just fine, but, I felt like I
shouldn't be doing it this way... bad smell, you know? (:P)
The theme login page loads a static login page of each application
using the *client_id* variable. Then, places the contents on the
current page and sets the necessary elements to Keycloak expected
values (like form action, forgot password and register user links
URLs, error messages, etc).
For each new application, all I have to do is create the static
resources in a */themes/${client_id}* folder, with the correct
element IDs and it does the trick.
Of course there are some drawbacks, but it turns out that I have now
3 applications using this approach. I wish I could have
per-application themes, rather.
3. *Convince my client to use the same login page for all applications**
*This would be the standard approach, but, unfortunatelly, isn't an
option for me.
Any thoughts on that?
Thanks in advance.
Regards,
Marcio Fernandes de Lima
http://linkedin.com/in/marcioferlan
SCJP, SCWCD, MySQL Core Certified
On 08/05/2015 02:14, Stian Thorgersen wrote:
> When a user logs in the user logs in to the realm, not the application. So
> it doesn't make sense to have different login pages per application.
>
> ----- Original Message -----
>> From: "Marcio Lima" <marcioferlan(a)gmail.com>
>> To: keycloak-dev(a)lists.jboss.org
>> Sent: Thursday, 7 May, 2015 11:30:46 PM
>> Subject: [keycloak-dev] Themes per application
>>
>> Hello guys!
>>
>> I'm trying to implement Keycloak in my solution, but it turns out that I
>> need to have a completely different login page per application in the
>> same Realm. Keycloak allows me to create themes, but only at Realm
>> level, not at Application level.
>>
>> How would you guys suggest me approaching this? Any plans to develop
>> such a feature or ways to work around it?
>>
>> Thanks in advance!
>> --
>>
>> Atenciosamente,
>>
>> Marcio Fernandes de Lima
>> http://linkedin.com/in/marcioferlan
>> SCJP, SCWCD, MySQL Core Certified
>>
>> _______________________________________________
>> keycloak-dev mailing list
>> keycloak-dev(a)lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>>
3272
days inactive
3276
days old
6 comments
3 participants
participants (3)
-
Marcio Lima -
Stefano Travelli -
Stian Thorgersen