JobCannon
ټول مهارتونه

Keycloak Identity Provider

⬢ درجه 2تخنیکي
لوړ
د معاش اغېز
3 میاشتې
د زده کړې وخت
سخت
سختوالی
—
مسلکونه
په یوه نظر

Keycloak is Red Hat's open-source identity provider (IdP) for SSO, OAuth2, SAML, LDAP integration, user management. Deploy in Kubernetes, integrate applications (OIDC flows), manage users/roles/permissions. Mastery takes 6-8 weeks. Practitioners earn 30-40% premium because they architect secure authentication for 100+ applications. The 3% who design multi-tenant IAM with compliance (SOC2, GDPR) are highly valued.

Keycloak Identity Provider څه شی دی

Keycloak is an open-source identity and access management (IAM) platform from Red Hat. It provides centralized authentication for applications, Single Sign-On (SSO), user management, role-based access control (RBAC), federation with LDAP/Active Directory, and integration with external identity providers (Google, GitHub, OIDC). Keycloak speaks standard protocols: OAuth2, OpenID Connect (OIDC), SAML. Applications redirect users to Keycloak for login, Keycloak handles credential verification, returns tokens, applications validate tokens and grant access.

🔧 وسیلې او ایکوسیستم
Keycloak serverKubernetes deploymentPostgreSQL backendLDAP/Active DirectoryOAuth2/OIDCSAMLUser federationRealm configurationClient adapters

📋 مخکې له دې چې تاسو پیل کړئ

Kubernetes Docker

💰 د سیمې له مخې معاش

سیمهجونیرمنځنیسېنیر
USA$85k$150k$230k
UK£52k£92k£140k
EU€58k€100k€150k
CANADAC$90kC$155kC$240k

❓ ډېرې پوښتل شوې پوښتنې

What's the difference between Keycloak and Auth0?
Keycloak is open-source, self-hosted (or managed). Auth0 is SaaS, managed by Auth0 Inc. Keycloak = control, cheaper at scale, requires ops. Auth0 = simplicity, expensive, vendor lock-in. Use Keycloak for enterprises managing own infrastructure.
How does Keycloak handle LDAP?
Configure user federation to LDAP/Active Directory. Keycloak syncs users (read-only or bi-directional). On login, Keycloak validates credentials against LDAP. No password sync needed, LDAP is source of truth.
Can I integrate Keycloak with existing applications?
Yes. Applications redirect to Keycloak login (OIDC, SAML, OAuth2). User logs in, Keycloak redirects back with token. App validates token (signature, claims) and grants access. Keycloak adapters (JavaScript, Java, Python) simplify integration.
How does multi-tenancy work?
Create Keycloak realms per tenant. Each realm has own users, roles, settings. One Keycloak instance serves multiple independent tenants. Realm isolation = no data leakage.
What about token expiry and refresh?
Access tokens expire (15 min typical). App uses refresh token to get new access token (no re-login needed). Refresh tokens live longer (7-30 days). On logout, revoke refresh token.

ډاډه نه یاست چې دا مهارت ستاسو لپاره دی؟

د کاري مسلک سمون ازموینه واخلئ — موږ به تاسو ته سمې لارې وړاندیز کړو.

زما لپاره غوره مهارتونه ومومئ →

خپل غوره مسلکي لاره ومومئ

د ۲٬۵۲۱ مسلکونو په اوږدو کې د مهارت پر بنسټ سمون. وړیا.

د کاري مسلک سمون ازموینه واخلئ — وړیا →