Hi all, We are glad to announce the first release of the GuardianKey extension for KeyCloak. In the opportunity, we would like to acknowledge that the KeyCloak's community is very active and contributed a lot by providing directions for the problems faced by us in this foray. We give a special thank you for Aléxis Almeida, Dmitry Telegin, Stian Thorgersen, and Thomas Darimont. GuardianKey is a solution to protect systems against authentication attacks. We use Machine Learning to analyze the user's behavior, threat intelligence, and psychometrics (or behavioral biometrics) and provide an attack risk in real-time. The protected system (in the concrete case, KeyCloak, via the extension) sends the events via REST for the GuardianKey on each login attempt and can notify users or even block the high-risk events. Also, there is a panel that presents dashboards about login attempts. We have cloud and product versions. We note that there is a free service for small environments. More info at [1]. The extension is available at [2], in which we also included documentation (docs and video [3]) for its installation, configuration, and use. We appreciate any suggestion or comment. [1] https://guardiankey.io [2] https://github.com/pauloangelo/guardiankey-plugin-keycloak [3] https://youtu.be/R5QFcH4bXuA Once again, thank you! Best regards, Paulo Angelo https://www.linkedin.com/in/reddhatt/ _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user

Hi Stian, Thank you for the tip. We are going to include this in our roadmap. []'s Paulo Angelo On Wed, Feb 27, 2019 at 5:05 AM Stian Thorgersen <sthorger(a)redhat.com&gt; wrote: > This is really nice. Congrats. > > One small improvement I spotted that you can apply to the extension is > that you can now include theme resources in the JAR itself. Take a look at > https://www.keycloak.org/docs/latest/server_development/index.html#_theme... . > With that users won't have to install the FTL template separately. > > On Wed, 27 Feb 2019 at 02:18, Paulo Angelo <pa(a)pauloangelo.com&gt; wrote: > >> Hi all, >> >> >> We are glad to announce the first release of the GuardianKey extension for >> KeyCloak. >> >> In the opportunity, we would like to acknowledge that the KeyCloak's >> community is very active and contributed a lot by providing directions for >> the problems faced by us in this foray. We give a special thank you for >> Aléxis Almeida, Dmitry Telegin, Stian Thorgersen, and Thomas Darimont. >> >> GuardianKey is a solution to protect systems against authentication >> attacks. We use Machine Learning to analyze the user's behavior, threat >> intelligence, and psychometrics (or behavioral biometrics) and provide an >> attack risk in real-time. The protected system (in the concrete case, >> KeyCloak, via the extension) sends the events via REST for the GuardianKey >> on each login attempt and can notify users or even block the high-risk >> events. Also, there is a panel that presents dashboards about login >> attempts. We have cloud and product versions. We note that there is a free >> service for small environments. More info at [1]. >> >> The extension is available at [2], in which we also included documentation >> (docs and video [3]) for its installation, configuration, and use. >> >> We appreciate any suggestion or comment. >> >> [1] https://guardiankey.io >> >> [2] https://github.com/pauloangelo/guardiankey-plugin-keycloak >> >> [3] https://youtu.be/R5QFcH4bXuA >> >> Once again, thank you! >> >> Best regards, >> >> Paulo Angelo >> >> https://www.linkedin.com/in/reddhatt/ >> _______________________________________________ >> keycloak-user mailing list >> keycloak-user(a)lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/keycloak-user > > -- Att, Paulo Angelo _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user

Hi Pedro Igor, Currently, GuardianKey supports Authentication and Registration events. We have in our roadmap the Authorization and Profile Changing events. We can also do customized events, depending on the project. In the KeyCloak's extension, we implemented only the Authentication events. But I believe that the other events will be useful too. I'm going to add them to the extension's roadmap. Thank you. []'s Paulo Angelo On Wed, Feb 27, 2019 at 3:02 PM Pedro Igor Silva <psilva(a)redhat.com&gt; wrote: > Do you have any plans to also take into account authorization events? > > Regards. > Pedro Igor > > On Wed, Feb 27, 2019 at 2:57 PM Paulo Angelo <pa(a)pauloangelo.com&gt; wrote: > >> Hi Stian, >> >> Thank you for the tip. We are going to include this in our roadmap. >> >> []'s >> >> Paulo Angelo >> >> On Wed, Feb 27, 2019 at 5:05 AM Stian Thorgersen <sthorger(a)redhat.com&gt; >> wrote: >> >> > This is really nice. Congrats. >> > >> > One small improvement I spotted that you can apply to the extension is >> > that you can now include theme resources in the JAR itself. Take a >> look at >> > >> https://www.keycloak.org/docs/latest/server_development/index.html#_theme... >> . >> > With that users won't have to install the FTL template separately. >> > >> > On Wed, 27 Feb 2019 at 02:18, Paulo Angelo <pa(a)pauloangelo.com&gt; wrote: >> > >> >> Hi all, >> >> >> >> >> >> We are glad to announce the first release of the GuardianKey >> extension for >> >> KeyCloak. >> >> >> >> In the opportunity, we would like to acknowledge that the KeyCloak's >> >> community is very active and contributed a lot by providing >> directions for >> >> the problems faced by us in this foray. We give a special thank you >> for >> >> Aléxis Almeida, Dmitry Telegin, Stian Thorgersen, and Thomas Darimont. >> >> >> >> GuardianKey is a solution to protect systems against authentication >> >> attacks. We use Machine Learning to analyze the user's behavior, >> threat >> >> intelligence, and psychometrics (or behavioral biometrics) and >> provide an >> >> attack risk in real-time. The protected system (in the concrete case, >> >> KeyCloak, via the extension) sends the events via REST for the >> GuardianKey >> >> on each login attempt and can notify users or even block the high-risk >> >> events. Also, there is a panel that presents dashboards about login >> >> attempts. We have cloud and product versions. We note that there is a >> free >> >> service for small environments. More info at [1]. >> >> >> >> The extension is available at [2], in which we also included >> documentation >> >> (docs and video [3]) for its installation, configuration, and use. >> >> >> >> We appreciate any suggestion or comment. >> >> >> >> [1] https://guardiankey.io >> >> >> >> [2] https://github.com/pauloangelo/guardiankey-plugin-keycloak >> >> >> >> [3] https://youtu.be/R5QFcH4bXuA >> >> >> >> Once again, thank you! >> >> >> >> Best regards, >> >> >> >> Paulo Angelo >> >> >> >> https://www.linkedin.com/in/reddhatt/ >> >> _______________________________________________ >> >> keycloak-user mailing list >> >> keycloak-user(a)lists.jboss.org >> >> https://lists.jboss.org/mailman/listinfo/keycloak-user >> > >> > >> >> -- >> >> Att, >> >> Paulo Angelo >> _______________________________________________ >> keycloak-user mailing list >> keycloak-user(a)lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/keycloak-user > > -- Att, Paulo Angelo