[keycloak-dev] Queries on Keycloak

Bill Burke bburke at redhat.com
Tue Aug 4 09:55:37 EDT 2015



On 8/4/2015 9:48 AM, Satyajit Das wrote:
> Hi Team,
>
> Kindly respond to the below queries.
>
> 1)What is the limit to the number of realms, roles per realm, and users
> per realm or users per role in key cloak.
>

We haven't really tested the limits.  Should be pretty large.  I know 
one keycloak user has a database of around 1 million users.

> 2)what is the expire time of a token id generated in key
> cloak.(session.getTokenString()).
>

Its configurable in admin console

> 3) is there any authentication done after successfull login ,if I visit
> subsequent pages.
>

Do you mean is there any authentication with the Keycloak server?
Once a user is logged in, they do not see any more authentication 
screens.  Once you visit one application, you are authenticated for that 
application.  If you visit another application, you are redirected to 
keycloak auth server, auth server will validate the SSO cookie, then 
generate a token for the aplication and send you back there.




-- 
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com


More information about the keycloak-dev mailing list