Hi Kamal,

there is interface IdentityManagerProvider, which allows you to provide your own way from where to retrieve Picketlink IdentityManager/PartitionManager. Right now, there is just one implementation of this interface available RealmIdentityManagerProvider, which uses PartitionManager initialized with LDAP and configuration of LDAP is taken from realm configuration. I was thinking about adding another implementation, which will be able to use PartitionManager from picketlink subsystem.

So if you want, you can create your own implementation of this interface and plug it in . See our examples for more details how to do it: https://github.com/keycloak/keycloak/tree/master/examples/providers
There is no example for retrieving custom configuration of picketlink, but there are other examples, which can point you to how to create custom provider...

Marek

On 29.5.2014 15:41, Kamal Jagadevan wrote:
Hello Marek,
  Thanks for the information, I was wondering if Keycloak can integrate with picketlink that our application already uses.
Looks like we might have implement a new authentication provider that uses our existing picketlink as per your documentation.

Is that right? Please confirm.

Best
Kamal

From: Marek Posolda <mposolda@redhat.com>
To: Kamal Jagadevan <j.kamal@ymail.com>; "keycloak-user@lists.jboss.org" <keycloak-user@lists.jboss.org>
Sent: Wednesday, May 28, 2014 4:49 PM
Subject: Re: [keycloak-user] Integration of Keycloak with Picketlink

Hi,

currently Picketlink IDM is used for LDAP integration and it's used just in Authentication as you pointed. You first need to configure your LDAP server and then you can configure "picketlink" authenticatonProvider, which will mean that your LDAP users will be able to authenticate through picketlink into your realm.

More info is in latest documentation, but you will need to build it from sources https://github.com/keycloak/keycloak/tree/master/docbook . It should be available in documentation on official website http://www.keycloak.org in few days.

Marek


On 28.5.2014 18:07, Kamal Jagadevan wrote:


Hello,
  From the admin console, I noticed that there is a support to use picketlink with Keycloak.
How is that configured as  "Authentication options providers options" are not displayed in the "Authentication" tab of settings.
Is this intentional or am I missing something?


Cheers
Kamal





_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user