there is interface IdentityManagerProvider, which allows you to provide
your own way from where to retrieve Picketlink
IdentityManager/PartitionManager. Right now, there is just one
implementation of this interface available RealmIdentityManagerProvider,
which uses PartitionManager initialized with LDAP and configuration of
LDAP is taken from realm configuration. I was thinking about adding
another implementation, which will be able to use PartitionManager from
So if you want, you can create your own implementation of this interface
and plug it in . See our examples for more details how to do it:
There is no example for retrieving custom configuration of picketlink,
but there are other examples, which can point you to how to create
On 29.5.2014 15:41, Kamal Jagadevan wrote:
Thanks for the information, I was wondering if Keycloak can integrate
with picketlink that our application already uses.
Looks like we might have implement a new authentication provider that
uses our existing picketlink as per your documentation.
Is that right? Please confirm.
*From:* Marek Posolda <mposolda(a)redhat.com>
*To:* Kamal Jagadevan <j.kamal(a)ymail.com>;
*Sent:* Wednesday, May 28, 2014 4:49 PM
*Subject:* Re: [keycloak-user] Integration of Keycloak with Picketlink
currently Picketlink IDM is used for LDAP integration and it's used
just in Authentication as you pointed. You first need to configure
your LDAP server and then you can configure "picketlink"
authenticatonProvider, which will mean that your LDAP users will be
able to authenticate through picketlink into your realm.
More info is in latest documentation, but you will need to build it
from sources https://github.com/keycloak/keycloak/tree/master/docbook
. It should be available in documentation on official website
in few days.
On 28.5.2014 18:07, Kamal Jagadevan wrote:
> From the admin console, I noticed that there is a support to use
> picketlink with Keycloak.
> How is that configured as "Authentication options providers options"
> are not displayed in the "Authentication" tab of settings.
> Is this intentional or am I missing something?
> keycloak-user mailing list
> keycloak-user(a)lists.jboss.org <mailto:firstname.lastname@example.org>