Re: [keycloak-user] Securing Application which is exposed to Guest Users

login is required but with custom fields like webinarId/webinar secret which are common for all guest users. On Mon, Jan 18, 2016 at 1:45 PM, Stian Thorgersen <sthorger(a)redhat.com&gt; wrote: > Assuming by guest users you mean that no login is required then why does > it need securing at all? > > On 16 January 2016 at 02:53, Naresh Kumar Reddy <pnreddy.svu(a)gmail.com&gt; > wrote: > >> Hi, >> >> We have two applications which provides webinar functionality. >> >> 1) Provisioning app-- Organizers provision webinar and manage their >> account. Since organizers are Keycloak users, I can secure provisioning app >> out of the box. >> >> 2) Webinar app-- The users of this app are organizers and participants. >> Participants are no more provisioned as Keycloack users. Those are guest >> users. >> >> My question is how do we secure second app with keyclock? >> >> * Note*: Both apps will be under same realm. >> >> Is there anyway to secure with custom field like webinarId which is >> passed as a parameter? >> >> Or something better solution? >> >> Under same realm securing one app with keycloak users and other app with >> custom authentication? >> >> Thanks for the great work. >> >> >> Thanks & Regards >> Naresh >> >> _______________________________________________ >> keycloak-user mailing list >> keycloak-user(a)lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/keycloak-user >> > >