WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2025 • Aug 20, 2025 • Session details

Delegating the chores of authenticating users to Keycloak

Alexander Schwartz

Stop wasting engineering cycles rebuilding custom user authentication. Delegate identity management to Keycloak to handle complex OIDC workflows and focus strictly on your core business logic.

Pause
Mute Enter Fullscreen
#1 about 3 min

Motivations for delegating user authentication frameworks

Understanding the core challenges of building custom login flows rather than relying on established identity solutions.

#2 about 3 min

Key components and history of the Keycloak project

An overview of active authentication actors and Keycloak's evolution into a robust open-source CNCF project.

#3 about 2 min

Discovering standard OpenID Connect capabilities and provider endpoints

How applications query the well-known configuration JSON endpoint to automatically discover available identity provider services.

#4 about 2 min

Determining login status and initiating user registration prompts

Using specific URL prompt parameters to check login state or seamlessly direct users towards account creation.

#5 about 4 min

Executing user login flows and live registration demos

Demonstrating initial parameter configuration for native user signups alongside application integration for token tracking.

#6 about 2 min

Checking active login sessions using isolated hidden iframes

Implementing standard cross-domain Javascript messaging to seamlessly verify if a user's remote tab remains authenticated.

#7 about 2 min

Refreshing access tokens and parsing user endpoint information

Using token endpoints properly to renew application access while populating custom claims mapped directly from backend databases.

#8 about 2 min

Safely logging users out across multiple integrated applications

Preventing malicious logout execution patterns by mandating an ID token hint payload sent directly to end-session destinations.

#9 about 2 min

Enforcing step-up authentication using required second security factors

Configuring connected client frameworks to natively demand multifactor validation for sensitive business actions via designated ACR values.

#10 about 4 min

Managing user profiles explicitly via application initiated actions

Redirecting users to specialized Keycloak UI capabilities to handle autonomous profile updates and seamless email verification workflows.

#11 about 3 min

Enabling incremental user profiling through dynamic custom forms

Customizing external data collection procedures to reliably gather specific profile information only when matching requested scopes apply.

#12 about 2 min

Restricting application access by intercepting early login flows

Intercepting unauthorized network participants early during the core authentication phase to improve broad system authorization security.

#13 about 2 min

Reviewing identity endpoints alongside specific Keycloak preview features

A concluding review analyzing established OpenID Connect conventions paired with opportunities to test upcoming Keycloak integration features.

Matching moments

1:43 min

Exploring the Keycloak open-source identity and access system

Alexander Schwartz Alexander Schwartz · WWC 2025

1:03 min

Offloading identity management to hosted authentication platform providers

Dávid Lévai · LIVE

2:22 min

Adapting OpenID Connect for decentralized data sharing

Adam Larter Adam Larter · WWC 2024

2:52 min

Implementing IAM with Keycloak and OpenID Connect

Thomas Südbröcker · LIVE

2:24 min

Securing cloud deployments by utilizing OpenID Connect mapping

Chris Ayers · LIVE

1:57 min

Managing credential delegation in multi-agent application architectures

Alexander Günsche Alexander Günsche +1 · WWC Europe 2026

More from World Congress 2025

GenAI Security: Navigating the Unseen Iceberg thumbnail
24:33
10 months ago

GenAI Security: Navigating the Unseen Iceberg

Maish Saidel-Keesing

Behind the Code: How Women Are Powering the Future of AI thumbnail
30:28
12 months ago

Behind the Code: How Women Are Powering the Future of AI

Alexandra Wudel, Laura Moritz, Madalina Florean

The AI Hype Filter: What’s Real, What’s Investable, What’s Noise? thumbnail
28:12
12 months ago

The AI Hype Filter: What’s Real, What’s Investable, What’s Noise?

Justus Lumpe, Konstantin Vinogradov, Nils Eiteneyer, Stephan Wirris

AI in Leadership: How Technology is Reshaping Executive Roles thumbnail
28:19
12 months ago

AI in Leadership: How Technology is Reshaping Executive Roles

Bernd Datler, Jasmin Kaiser, Jeff Hausmann, Sonja Alvarez

The AI-Ready Stack: Rethinking the Engineering Org of the Future thumbnail
28:09
12 months ago

The AI-Ready Stack: Rethinking the Engineering Org of the Future

Alex Laubscher, Jan Oberhauser, Keno Dreßel, Mirko Novakovic

AI Sovereignty: What Does It Take? thumbnail
29:13
12 months ago

AI Sovereignty: What Does It Take?

Boris Hecker, Clemens Wasner, Robin Hermann, Sonja Alvarez

Upcoming sessions on this topic

Open session

World Congress 2026 North America

SecurePrompt: Building a Pre-Flight Security Layer for Agentic AI

Ravi Sastry Kadali

AI/ML Engineer at General Motors

Ravi Sastry Kadali
Open session

World Congress 2026 North America

When Agents Became Users: Rearchitecting Identity and Permissions for AI at Scale

Yoav Gal, Dor Cohen

Yoav Gal
Dor Cohen
Open session

World Congress 2026 North America

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

Abdel Fane

Founder of OpenA2A

Abdel Fane
Open session

World Congress 2026 North America

It passed auth, then production caught fire

Alex Olivier

Co-founder & CPO @ Cerbos | OpenID AuthZEN Co-chair

Alex Olivier
Open session

World Congress 2026 North America

Secure-by-Inclusion: Preventing Accessibility Barriers from Becoming Security Vulnerabilities

Radostina (Ina) Tsvetkova

Norwegian Directorate of Labour and Welfare (NAV), Senior Advisor in Digital Accessibility and Inclusive Design

Radostina (Ina) Tsvetkova
Open session

World Congress 2026 North America

AI Agents are Only as Smart as their Context: Building a Real-Time Context Engine at Intuit

Bharat Patel

Lead Software Engineer at Intuit

Bharat Patel

Related videos

Keeping applications secure by evolving OAuth 2.0 and OpenID Connect thumbnail
24:07
WWC Europe 2026 • about 1 month ago

Keeping applications secure by evolving OAuth 2.0 and OpenID Connect

Alexander Schwartz

Keycloak case study: Making users happy with service level indicators and observability thumbnail
27:15
WWC 2025 • 12 months ago

Keycloak case study: Making users happy with service level indicators and observability

Alexander Schwartz

Keymate – Modern Authorization for Developers thumbnail
6:04
WWC 2025 • 12 months ago

Keymate – Modern Authorization for Developers

Halil Özkan

Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls thumbnail
31:16
WWC Europe 2026 • about 1 month ago

Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls

Martina Kraus

Going Beyond Passwords: The Future of User Authentication thumbnail
27:55
WWC 2023 • almost 3 years ago

Going Beyond Passwords: The Future of User Authentication

Gift Egwuenu

Accelerating Authentication Architecture: Taking Passwordless to the Next Level thumbnail
49:52
LIVE • almost 3 years ago

Accelerating Authentication Architecture: Taking Passwordless to the Next Level

Yedidya Schwartz

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.