WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2025 • Aug 20, 2025 • Session details

Delegating the chores of authenticating users to Keycloak

Alexander Schwartz

Stop wasting engineering cycles rebuilding custom user authentication. Delegate identity management to Keycloak to handle complex OIDC workflows and focus strictly on your core business logic.

Pause
Mute Enter Fullscreen
#1 about 3 min

Motivations for delegating user authentication frameworks

Understanding the core challenges of building custom login flows rather than relying on established identity solutions.

#2 about 3 min

Key components and history of the Keycloak project

An overview of active authentication actors and Keycloak's evolution into a robust open-source CNCF project.

#3 about 2 min

Discovering standard OpenID Connect capabilities and provider endpoints

How applications query the well-known configuration JSON endpoint to automatically discover available identity provider services.

#4 about 2 min

Determining login status and initiating user registration prompts

Using specific URL prompt parameters to check login state or seamlessly direct users towards account creation.

#5 about 4 min

Executing user login flows and live registration demos

Demonstrating initial parameter configuration for native user signups alongside application integration for token tracking.

#6 about 2 min

Checking active login sessions using isolated hidden iframes

Implementing standard cross-domain Javascript messaging to seamlessly verify if a user's remote tab remains authenticated.

#7 about 2 min

Refreshing access tokens and parsing user endpoint information

Using token endpoints properly to renew application access while populating custom claims mapped directly from backend databases.

#8 about 2 min

Safely logging users out across multiple integrated applications

Preventing malicious logout execution patterns by mandating an ID token hint payload sent directly to end-session destinations.

#9 about 2 min

Enforcing step-up authentication using required second security factors

Configuring connected client frameworks to natively demand multifactor validation for sensitive business actions via designated ACR values.

#10 about 4 min

Managing user profiles explicitly via application initiated actions

Redirecting users to specialized Keycloak UI capabilities to handle autonomous profile updates and seamless email verification workflows.

#11 about 3 min

Enabling incremental user profiling through dynamic custom forms

Customizing external data collection procedures to reliably gather specific profile information only when matching requested scopes apply.

#12 about 2 min

Restricting application access by intercepting early login flows

Intercepting unauthorized network participants early during the core authentication phase to improve broad system authorization security.

#13 about 2 min

Reviewing identity endpoints alongside specific Keycloak preview features

A concluding review analyzing established OpenID Connect conventions paired with opportunities to test upcoming Keycloak integration features.

Matching moments

1:27 min

Delegating authentication via OIDC identity providers

Borko Djurkovic Borko Djurkovic · World Congress 2026 North America

1:43 min

Exploring the Keycloak open-source identity and access system

Alexander Schwartz Alexander Schwartz · World Congress 2025

1:03 min

Offloading identity management to hosted authentication platform providers

Dávid Lévai · LIVE

2:22 min

Adapting OpenID Connect for decentralized data sharing

Adam Larter Adam Larter · World Congress 2024

2:52 min

Implementing IAM with Keycloak and OpenID Connect

Thomas Südbröcker · LIVE

2:24 min

Securing cloud deployments by utilizing OpenID Connect mapping

Chris Ayers · LIVE

More from World Congress 2025

GenAI Security: Navigating the Unseen Iceberg thumbnail
24:33
12 months ago

GenAI Security: Navigating the Unseen Iceberg

Maish Saidel-Keesing

Behind the Code: How Women Are Powering the Future of AI thumbnail
30:28
about 1 year ago

Behind the Code: How Women Are Powering the Future of AI

Alexandra Wudel, Laura Moritz, Madalina Florean

The AI Hype Filter: What’s Real, What’s Investable, What’s Noise? thumbnail
28:12
about 1 year ago

The AI Hype Filter: What’s Real, What’s Investable, What’s Noise?

Justus Lumpe, Konstantin Vinogradov, Nils Eiteneyer, Stephan Wirris

AI in Leadership: How Technology is Reshaping Executive Roles thumbnail
28:19
about 1 year ago

AI in Leadership: How Technology is Reshaping Executive Roles

Bernd Datler, Jasmin Kaiser, Jeff Hausmann, Sonja Alvarez

The AI-Ready Stack: Rethinking the Engineering Org of the Future thumbnail
28:09
about 1 year ago

The AI-Ready Stack: Rethinking the Engineering Org of the Future

Alex Laubscher, Jan Oberhauser, Keno Dreßel, Mirko Novakovic

AI Sovereignty: What Does It Take? thumbnail
29:13
about 1 year ago

AI Sovereignty: What Does It Take?

Boris Hecker, Clemens Wasner, Robin Hermann, Sonja Alvarez

Upcoming sessions on this topic

Open session

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

  • Hadar Geva

    Myop

    CTO & Co-founder

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Open session

How Google built a Consistent, Global Authorization System with Zanzibar (and you can too!)

  • Sohan Maheshwar

    AuthZed

    Lead Developer Advocate

Open session

From Prompt Engineering to Harness Engineering: Building Observable and Governed GenAI Systems

  • Lakshmi Devi Prakash

    JPMorgan Chase

    VP, Applied AI/ML Lead

Open session

We Deleted Our Observability Stack and Rebuilt It with OTEL: 12 Engineers to 4 at 20K+ clusters

  • Yash Sharma

    DigitalOcean

    Developer Advocate

Open session

Prompt Debt: Why Your AI System Is Frozen in Time

  • Suriya Prakash B

    Red Hat

    Principal Software Engineer

Related videos

Keeping applications secure by evolving OAuth 2.0 and OpenID Connect thumbnail
24:07
World Congress 2026 Europe • 3 months ago

Keeping applications secure by evolving OAuth 2.0 and OpenID Connect

Alexander Schwartz

Keycloak case study: Making users happy with service level indicators and observability thumbnail
27:15
World Congress 2025 • about 1 year ago

Keycloak case study: Making users happy with service level indicators and observability

Alexander Schwartz

Keymate – Modern Authorization for Developers thumbnail
6:04
World Congress 2025 • about 1 year ago

Keymate – Modern Authorization for Developers

Halil Özkan

Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls thumbnail
31:16
World Congress 2026 Europe • 3 months ago

Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls

Martina Kraus

Going Beyond Passwords: The Future of User Authentication thumbnail
27:55
World Congress 2023 • about 3 years ago

Going Beyond Passwords: The Future of User Authentication

Gift Egwuenu

Accelerating Authentication Architecture: Taking Passwordless to the Next Level thumbnail
49:52
LIVE • about 3 years ago

Accelerating Authentication Architecture: Taking Passwordless to the Next Level

Yedidya Schwartz

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.