[keycloak-dev] Integration with GuardianKey

Paulo Angelo pa at pauloangelo.com
Sun Feb 3 12:17:39 EST 2019


Hi all,

We are trying to integrate KeyCloak with GuardianKey. However, we have
doubts related to the best way to do this and the best point in the
KeyCloak’s code for this integration.

GuardianKey is a service to protect systems against authentication attacks.
It uses Machine Learning and analyses the user's behavior, threat
intelligence and psychometrics (or behavioral biometrics). The protected
system (in the concrete case, KeyCloak) must send an event via REST for the
GuardianKey on each login attempt. More info at https://guardiankey.io .

The best way to integrate would be on having a hook in the procedure that
process the user credentials submission in KeyCloak (the script that
receives the POST), something such as:

if(<POST IN AUTH FORM>) {

 boolean loginFailed =  checkLoginInKeyCloak();

 GuardianKeyEvent event = createEventForGuardianKey(username,loginFailed);

 boolean GuardianKeyValidation = checkGuardianKeyViaREST(event);

 if(GuardianKeyValidation){

    // Allow access

 } else {

    // Deny access

 }

}

Where is the best place to create this integration? Is there a way to
create a hook for this purpose? Should we create an extension?

Any help is welcome.

Thank you in advance.

Best regards,

Paulo Angelo


More information about the keycloak-dev mailing list