Re: [keycloak-user] Multi Tenancy

My comments inline. On Tue, Feb 25, 2014 at 12:31 PM, Bill Burke <bburke(a)redhat.com <mailto:bburke@redhat.com>> wrote: So you want to bind a URL to a specific adapter configuration? <secured-deployment> might have a <url-pattern> and/or keycloak.json might be expanded to do the same. url-pattern could be /foo/bar/* or even /foo/bar/{realm}/* and keycloak adapter would pull and match a realm configuration based on this? yes something like this would do. More comments inline On 2/24/2014 2:28 PM, Travis De Silva wrote: > > I had a look at your thoughts on how to do this with Aerogear. If I > understand the concept correctly, with the UPS + Keycloak in one bundle > option, we have to update the jboss wildfly config on the fly whenever > we get new tenants. I did not think of this option and not sure if this > could be done with wildfly without having to restart wildfly, but even > if that is possible, that means we are going to have a large list of > wildfly adapter profiles and I don't think that is practical. Just think > even if we get 200 tenants, this is going to make it very complicated. > Also I think the concept is one war per realm so this might not even be > possible for a single application multi tenant model. > There's just no way around a large number of adapter profiles in your scenario. Each realm has its own public key in which to verify tokens with. Each of these public keys must be known to the adapter. What about the Per war configuration? I didn't see realm level config in there? So won't that work?