[keycloak-user] Discourse SSO with Keycloak

[Dean Peterson]

Ok thank you!  I should have enough to go on now.

On Sun, Mar 8, 2015 at 1:19 PM, Dean Peterson <peterson.dean at gmail.com>
wrote:

> I do not want to replace what I currently have though.  I use Keycloak.js
> to include security in my own AngularJS client side applications and those
> communicate with REST services in a separate Wildfly server secured with
> Keycloak using the wildfly adapter.  I want to add Discourse as a third
> party messaging application and want to integrate it with my existing
> security.  I just wanted to be sure there wasn't something, feature wise,
> in Keycloak I might be able to leverage.  I will probably just make a REST
> endpoint in my Wildfly server that gets the already logged in user
> information and create the necessary sso response Discourse is looking
> for.  It will be more complicated if users are not currently logged into my
> application and they try to go directly to the Discourse portion of the
> site.  I will have to redirect the user somehow to the keycloak login page,
> then when that flow ends remember where they were in the Discourse flow of
> things.  I just hate having to maintain security code though and that is
> why I went with Keycloak in the first place.  I wonder how Auth0 did it:
> https://meta.discourse.org/t/auth0-single-sign-on-for-enterprise-and-support-for-20-social-providers/12713
>
> On Sun, Mar 8, 2015 at 11:31 AM, Dean Peterson <peterson.dean at gmail.com>
> wrote:
>
>> Is there a best practice when it comes to adding hooks to Keycloak for
>> integrating with software that let's you replace their security with
>> Keycloak security?  For example, Discourse provides this guide:
>> https://meta.discourse.org/t/official-single-sign-on-for-discourse/13045.
>> It assumes the user is using their own home grown security where they can
>> easily intercept redirects.  Is there a mechanism in Keycloak that allows
>> end users to more easily implement the solution they describe in that
>> guide?  I realize you don't have time to give me a solution.  Can you just
>> nudge me in the right direction?
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20150308/f1455542/attachment.html