[keycloak-user] Customize Themes by Client

Josh Cain josh.cain at redhat.com
Thu Jul 28 16:53:13 EDT 2016


Sounds good!  KEYCLOAK-3370 filed, the only thing I think we might have to
discuss is how configuration of said SPI extension would work.  We're
trying to keep out-of-band configs to a minimum, and something like an SPI
would still have to be configured against clients in any particular realm,
which would make the GUI seem like an appropriate choice for the
configuration (IMO anyway).

I'll take the discussion there, thanks for pointing me in the right
direction.


Josh Cain | Software Applications Engineer
*Identity and Access Management*
*Red Hat*
+1 843-737-1735

On Thu, Jul 28, 2016 at 3:37 PM, Bruno Oliveira <bruno at abstractj.org> wrote:

> Hi Josh, some answers inline.
>
> On 2016-07-28, Josh Cain wrote:
> > Bruno,
> >
> > Thanks for the link!  Wasn't on this list when it was discussed.  So if I
> > understand the thread correctly:
> >
> >    - This feature has already been given a 'No' response by the Keycloak
> >    team.
>
> I'd say yes/no. From what I understood on that thread Stian suggested to
> expose a theme SPI. Which gives more flexibility.
>
> >    - Best way to implement client-specific theme functionality, as per
> the
> >    thread, is to use the client variable + conditionals in the template
> to
> >    change how a page renders.
>
> At the moment yes, you are correct.
>
> >
> > I'm a bit disappointed - I also have this requirement.  Don't want to go
> > back through and re-hash the reasons why (most were already covered on
> the
> > previous thread), but a client config for a theme would be immensely
> > helpful.
> >
> > As a side note, I'll be doing the work to either a) provide a mechanism
> for
> > clients to arbitrarily theme the login template, or b) allow clients to
> > select a login theme in Keycloak proper.  I'd much prefer b), but it
> looks
> > like a) might be my only option...
>
> Wouldn't the theme SPI sufficient for your use cases? If yes, I'd
> suggest to file a Jira and maybe start a thread at keycloak-dev. Stian
> is not here and I cannot speak on his behalf. But based on that thread
> I believe that having a theme SPI is a fair request.
>
> >
> >
> > Josh Cain | Software Applications Engineer
> > *Identity and Access Management*
> > *Red Hat*
> > +1 843-737-1735
> >
> > On Thu, Jul 28, 2016 at 11:36 AM, Bruno Oliveira <bruno at abstractj.org>
> > wrote:
> >
> > > Hi Josh, there was a discussion about it here[1].
> > >
> > > [1] -
> > >
> http://lists.jboss.org/pipermail/keycloak-user/2016-January/004288.html
> > >
> > > On 2016-07-28, Josh Cain wrote:
> > > > Hi All,
> > > >
> > > > I've got some SP's that want the ability to customize the look/feel
> of
> > > the
> > > > login page.  Couldn't find anything on the docs/jira site, but was
> > > curious
> > > > as to whether:
> > > >
> > > >    - Keycloak currently supports login themes by client
> > > >    - If not, would the team be open to such a feature?
> > > >
> > > >
> > > > Josh Cain | Software Applications Engineer
> > > > *Identity and Access Management*
> > > > *Red Hat*
> > > > +1 843-737-1735
> > >
> > > > _______________________________________________
> > > > keycloak-user mailing list
> > > > keycloak-user at lists.jboss.org
> > > > https://lists.jboss.org/mailman/listinfo/keycloak-user
> > >
> > >
> > > --
> > >
> > > abstractj
> > > PGP: 0x84DC9914
> > >
>
> --
>
> abstractj
> PGP: 0x84DC9914
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160728/be674930/attachment.html 


More information about the keycloak-user mailing list