8:53 p.m.
Hello All,
I am trying to integrate the Keycloak with Facebook social plugin. I had gone through the
examples and documentation. This works fine if I use the Keycloak hosted Login Page.
What I need is that we want to host our own login page and use the Keycloak APIs to
register the user and login.
I mean, I want to host our Sign Up/Login Page. When the user clicks on the Login with
Facebook, we want to redirect the user to FB and get the approval and collect the details,
create the user details that we need for our application. Then register the user on the
Keycloak.
I don’t see any documentation for this. I would be really grateful if you can shed some
light on this and point to the documentation that would help me in achieving this.
Thanks & Regards,
Madhan Kumar S P
5:41 a.m.
You can't. To user registration and login with external IdPs you need to
use the Keycloak login pages, which you should be using anyways.
On 21 November 2017 at 03:53, Madhan Kumar S P <madhan.klazzez(a)gmail.com>
wrote:
Hello All,
I am trying to integrate the Keycloak with Facebook social plugin.
I had gone through the examples and documentation. This works fine if I use
the Keycloak hosted Login Page.
What I need is that we want to host our own login page and use the
Keycloak APIs to register the user and login.
I mean, I want to host our Sign Up/Login Page. When the user
clicks on the Login with Facebook, we want to redirect the user to FB and
get the approval and collect the details, create the user details that we
need for our application. Then register the user on the Keycloak.
I don’t see any documentation for this. I would be really grateful
if you can shed some light on this and point to the documentation that
would help me in achieving this.
Thanks & Regards,
Madhan Kumar S P
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
6:47 a.m.
So this is my best guess of where I would start developing this.
This is a bit complicated (and also my best guess), and I am basing my
answer a bit on : https://github.com/wpic/sample-keycloak-getting-token and
http://keycloak-user.88327.x6.nabble.com/keycloak-user-Brokering-with-OID...
There are four components of this system : the User, Keycloak, Facebook,
and your Application (aka Broker). The Client requests the login page on
your Broker, is redirected to Facebook, and returns to your Broker with
Facebook's authentication payload. The Broker can verify this payload. At
this point you either have a new user or an existing user.
For new users use the KeyCloak Admin API to generate a new initial access
token and pre-populate your registration form. The User will receive this
form and register for your application. The Broker can exchange the
registration form for a proper access token and life can go on like normal.
If you have an existing user, you will need to use an External to Internal
token exchange. This is documented here :
http://www.keycloak.org/docs/latest/securing_apps/index.html#external-tok....
There are limits to the token exchange, but I think that facebook returns a
compatible access_token. I would suggest reviewing
https://developers.facebook.com/docs/facebook-login/manually-build-a-logi....
I
am looking forward to hearing if this works for you or not.
As I said in the opening, if I had your use case this is how I would try to
implement it. I have not tested this myself.
On Mon, Nov 20, 2017 at 9:53 PM, Madhan Kumar S P <madhan.klazzez(a)gmail.com>
wrote:
Hello All,
I am trying to integrate the Keycloak with Facebook social plugin.
I had gone through the examples and documentation. This works fine if I use
the Keycloak hosted Login Page.
What I need is that we want to host our own login page and use the
Keycloak APIs to register the user and login.
I mean, I want to host our Sign Up/Login Page. When the user
clicks on the Login with Facebook, we want to redirect the user to FB and
get the approval and collect the details, create the user details that we
need for our application. Then register the user on the Keycloak.
I don’t see any documentation for this. I would be really grateful
if you can shed some light on this and point to the documentation that
would help me in achieving this.
Thanks & Regards,
Madhan Kumar S P
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
3053
days inactive
3060
days old
2 comments
3 participants
participants (3)
-
Madhan Kumar S P -
Stian Thorgersen -
Summers Pittman