Keycloak

Last updated
Keycloak
Developer(s) WildFly, a division of Red Hat
Initial release10 September 2014;9 years ago (2014-09-10)
Stable release
24.0.4 / 8 May 2024 [1]
Repository
Written in Java
Type Single sign-on system
License Apache License 2.0
Website www.keycloak.org

Keycloak is an open source software product to allow single sign-on with identity and access management aimed at modern applications and services. Until April 2023, this WildFly community project was under the stewardship of Red Hat, who use it as the upstream project for their Red Hat build of Keycloak. In April 2023, Keycloak was donated to the CNCF and joined the foundation as an incubating project [2] .

Contents

Keycloak supports various protocols such as OpenID, OAuth version 2.0 and SAML and provides features such as user management, two-factor authentication, permissions and roles management, creating token services, etc. [3]

History

The first production release of Keycloak was in September 2014, with development having started about a year earlier. In 2016, Red Hat switched the RH SSO product from being based on the PicketLink framework to being based on the Keycloak upstream Project. [4] This followed a merging of the PicketLink codebase into Keycloak. [5] [6]

To some extent Keycloak can now also be considered a replacement of the Red Hat JBoss SSO open source product which was previously superseded by PicketLink. [7] [8] As of March 2018, JBoss.org is redirecting the old jbosssso subsite to the Keycloak website. The JBoss name is a registered trademark and Red Hat moved its upstream open source projects names to avoid using JBoss, JBoss AS to Wildfly being a more commonly recognized example. [9]

Components

There are two main components of Keycloak:

See also


Related Research Articles

<span class="mw-page-title-main">Red Hat</span> Computing services company

Red Hat, Inc. is an American software company that provides open source software products to enterprises and is a subsidiary of IBM. Founded in 1993, Red Hat has its corporate headquarters in Raleigh-Durham, North Carolina, with other offices worldwide.

<span class="mw-page-title-main">Cacti (software)</span> Free open source RRDtool

Cacti is an open-source, web-based network monitoring, performance, fault and configuration management framework designed as a front-end application for the open-source, industry-standard data logging tool RRDtool. Cacti allows a user to poll services at predetermined intervals and graph the resulting data. Through the use of Cacti plugins, it has been extended to encompass all of the FCAPS operational management categories. It is generally used to graph time-series data of metrics such as CPU load and network bandwidth utilization. A common usage is to monitor network traffic by polling a network switch or router interface via Simple Network Management Protocol (SNMP).

A web container is the component of a web server that interacts with Jakarta Servlets. A web container is responsible for managing the lifecycle of servlets, mapping a URL to a particular servlet and ensuring that the URL requester has the correct access-rights. A web container handles requests to servlets, Jakarta Server Pages (JSP) files, and other types of files that include server-side code. The Web container creates servlet instances, loads and unloads servlets, creates and manages request and response objects, and performs other servlet-management tasks. A web container implements the web component contract of the Jakarta EE architecture. This architecture specifies a runtime environment for additional web components, including security, concurrency, lifecycle management, transaction, deployment, and other services.

Single sign-on (SSO) is an authentication scheme that allows a user to log in with a single ID to any of several related, yet independent, software systems.

<span class="mw-page-title-main">JBoss (company)</span>

JBoss also known as JBoss Group, LLC and JBoss, Inc was a startup based in Atlanta, Georgia. It produced an open source Java application server called JBoss and later JBoss Enterprise Application Platform as well as a suite of related products. In 2006 it was acquired by Red Hat for at least 350 million US dollars.

Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. The software was created by Russian developer Igor Sysoev and publicly released in 2004. Nginx is free and open-source software, released under the terms of the 2-clause BSD license. A large fraction of web servers use Nginx, often as a load balancer.

Drools is a business rule management system (BRMS) with a forward and backward chaining inference-based rules engine, more correctly known as a production rule system, using an enhanced implementation of the Rete algorithm.

<span class="mw-page-title-main">JBoss Seam</span> Web application framework

Seam was a web application framework developed by JBoss, a division of Red Hat.

JBoss Developer Studio (JBDS) is a development environment created and currently developed by JBoss and Exadel.

Ajax4jsf was a project for an open source framework that added Ajax capabilities to the JavaServer Faces (JSF) web application framework.

<span class="mw-page-title-main">OpenAM</span>

OpenAM is an open-source access management, entitlements and federation server platform. Now it is supported by Open Identity Platform Community.

JBoss Operations Network is free software/open-source Java EE-based network management software. JBoss Operations Network is part of the JBoss Enterprise Middleware portfolio of software. JBoss ON is an administration and management platform for the development, testing, deployment, and monitoring of the application lifecycle. Because it is Java-based, the JBoss application server operates cross-platform: usable on any operating system that supports Java. JBoss ON was developed by JBoss, now a division of Red Hat.

The JBoss Enterprise SOA Platform is free software/open-source Java EE-based service-oriented architecture (SOA) software. The JBoss Enterprise SOA Platform is part of the JBoss Enterprise Middleware portfolio of software. The JBoss Enterprise SOA Platform enables enterprises to integrate services, handle business events, and automate business processes, linking IT resources, data, services and applications. Because it is Java-based, the JBoss application server operates cross-platform: usable on any operating system that supports Java. The JBoss SOA Platform was developed by JBoss, now a division of Red Hat.

The JBoss Enterprise Application Platform is a subscription-based/open-source Java EE-based application server runtime platform used for building, deploying, and hosting highly-transactional Java applications and services developed and maintained by Red Hat. The JBoss Enterprise Application Platform is part of Red Hat's Enterprise Middleware portfolio of software. Because it is Java-based, the JBoss application server operates across platforms; it is usable on any operating system that supports Java. JBoss Enterprise Application Platform was originally called JBoss and was developed by the eponymous company JBoss, acquired by Red Hat in 2006.

In computing, Red Hat Satellite is a systems-management product by the company Red Hat which allows system administrators to deploy and manage Red Hat Enterprise Linux (RHEL) hosts.

Security Assertion Markup Language (SAML) is a set of specifications that encompasses the XML-format for security tokens containing assertions to pass information about a user and protocols and profiles to implement authentication and authorization scenarios. This article has a focus on software and services in the category of identity management infrastructure, which enable building Web-SSO solutions using the SAML protocol in an interoperable fashion. Software and services that are only SAML-enabled do not go here.

<span class="mw-page-title-main">WildFly</span> Java application server software

WildFly, formerly known as JBoss AS, or simply JBoss, is an application server written by JBoss, now developed by Red Hat. WildFly is written in Java and implements the Java Platform, Enterprise Edition specification. It runs on multiple platforms.

The Cloud Native Computing Foundation (CNCF) is a Linux Foundation project that was started in 2015 to help advance container technology and align the tech industry around its evolution.

References

  1. "Keycloak 24.0.4 released". 8 May 2024. Retrieved 9 May 2024.
  2. "Keycloak joins CNCF as an incubating project". CNCF. Retrieved 2024-05-15.
  3. "Open Source Identity and Access Management". keycloak. Retrieved 2024-01-23.
  4. Atkisson, Brian (4 October 2016). "How Red Hat re-designed its Single Sign On (SSO) architecture, and why". Red Hat. Archived from the original on 9 January 2018. Retrieved 7 March 2018.
  5. Dawidowicz, Boleslaw (10 March 2015). "PicketLink and Keycloak projects are merging!". PicketLink.org. Archived from the original on 11 September 2015. Retrieved 7 March 2018.
  6. Peeples, Kenneth (28 May 2014). "What is the difference between Picketlink and Keycloak?". JBossDeveloper. Archived from the original on 5 April 2017. Retrieved 7 March 2018.
  7. "JBosssso (archived) Website". Archived from the original on 30 May 2014.
  8. Kalali, Masoud (30 May 2010). GlassFish Security. PACKT. p. 182. ISBN   978-1-847199-38-6.
  9. "Load Balancing Wildfly and JBoss Application Servers with NGINX Open Source and NGINX Plus | NGINX Documentation". docs.nginx.com. Retrieved 2023-10-11.
  10. "Securing Applications and Services Guide".