Re: [wildfly-dev] Keycloak SSO in WildFly 9

On 04/06/14 15:03, Anil Saldhana wrote: > On 06/04/2014 03:01 AM, Darran Lofthouse wrote: >> On 03/06/14 21:19, Stan Silvert wrote: >>> Also, Keycloak is much more than just SSO infrastructure. Other >>> features like user management, password management, auditing, skinning, >>> and the nice UI make it an excellent choice for applications that don't >>> require SSO. Who wants to keep coding all that stuff by hand? >> Auditing I am deliberately ignoring other than to say that is going to >> be a big topic in itself ;-) We already have two auditing solutions in >> WildFly one purely for management, the other for apps - the app auditing >> is tied very closely to the JAAS integration so we know something will >> happen in that area. From the perspective of wildfly-elytron we haven't >> reviewed auditing yet as it should not be driving the security solution. > The App auditing is not tied to JAAS. It is done in the EJB and Web security > integration. I am tired of people just equating what we have to JAAS. JAAS > is an implementation detail. Sorry you are quite right, what I mean to say was the current app audit logging is in the container to PicketBox integration points which is an area that will be re-visited in the wildfly-elytron efforts.