Re: [wildfly-dev] Keycloak SSO in WildFly 9
On 04/06/14 15:03, Anil Saldhana wrote:
On 06/04/2014 03:01 AM, Darran Lofthouse wrote:
>
> On 03/06/14 21:19, Stan Silvert wrote:
>> Also, Keycloak is much more than just SSO infrastructure. Other
>> features like user management, password management, auditing, skinning,
>> and the nice UI make it an excellent choice for applications that don't
>> require SSO. Who wants to keep coding all that stuff by hand?
> Auditing I am deliberately ignoring other than to say that is going to
> be a big topic in itself ;-) We already have two auditing solutions in
> WildFly one purely for management, the other for apps - the app auditing
> is tied very closely to the JAAS integration so we know something will
> happen in that area. From the perspective of wildfly-elytron we haven't
> reviewed auditing yet as it should not be driving the security solution.
The App auditing is not tied to JAAS. It is done in the EJB and Web security
integration. I am tired of people just equating what we have to JAAS. JAAS
is an implementation detail.
Sorry you are quite right, what I mean to say was the current app audit
logging is in the container to PicketBox integration points which is an
area that will be re-visited in the wildfly-elytron efforts.