[keycloak-dev] Questions about adding new identity providers

Wladislaw Mitzel mitzel at tawadi.de
Wed Dec 19 06:00:52 EST 2018


Hi all,

How is the addition of new identity providers handled in this project? I'd love to have a vk.com integration in keycloak. After some search, I've found this pull request [1] which adds PayPal as a new IdP. I think it's a pretty good "blueprint" of how to add a new IdP. I plan to give it a try and implement vk.com. This raises the following questions:

1) Is this implementation of a vk.com IdP something the project is interested in?

2) Does the answer to 1) apply to all IdPs? I mean vk.com is a quite large social network. What about some less known websites providing OAuth2 authentication. Would *any* IdP be added to the project? Are there certain criteria from which you can decide? 

3) What do you think about a feature which would enable to "configure" arbitrary OAuth2 Providers as IdP using the Admin Console? To me most of the implementations of org.keycloak.broker.oidc.AbstractOAuth2IdentityProvider look pretty similar. The main differences are how to interpret the responses of the IdP: I wonder whether this could be generalised.

I look forward to your answers,

Kind Regards,
Wladislaw

[1] https://github.com/keycloak/keycloak/pull/4449


More information about the keycloak-dev mailing list