Re: [keycloak-user] SPNEGO with Keycloak

Wildfly makes a number of login modules available as a part of the Security sub system that include SPNEGO (see the link below). Since Keycloak supports defining new Realms, if you can provide some hooks to map the newly defined Realms to the Security sub system, I think it would address the issue. Picketlink examples shed some light on how it can be done. https://docs.jboss.org/author/display/WFLY8/Security+subsystem+configuration On Saturday, October 11, 2014 8:53 AM, Bill Burke <bburke(a)redhat.com&gt; wrote: Kerberos is on our roadmap as there's some other Red Hat kerberos products we need to integrate wit. I don't understand Kerberos deep enough yet to know exactly what or how we would do it. My current thought that the Keycloak auth server would be a secured Kerberos service and become a bridge between kerberos and SAML or OpenID Connect. On 10/10/2014 5:24 PM, Raghuram wrote: -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com/