keycloak-login-attribute

KO | EN

gitlite — search

#javascript #python #typescript #llm #go #golang #android #machine-learning #deep-learning #linux #cli #pytorch #security #openai

keycloak-login-attribute

(★ 49)

Adds the possibility for Keycloak to connect via a user attribute

keycloak-login-attribute 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

![CI](https://github.com/cnieg/keycloak-login-attribute/workflows/CI/badge.svg)
[![semantic-release](https://img.shields.io/badge/%20%20%F0%9F%93%A6%F0%9F%9A%80-semantic--release-e10079.svg)](https://github.com/semantic-release/semantic-release)
[![License](https://img.shields.io/:license-Apache2-blue.svg)](http://www.apache.org/licenses/LICENSE-2.0)

# Keycloak Login Attribute SPI

An [Authentication Service Provider](https://www.keycloak.org/docs/latest/server_development/index.html#_auth_spi) that adds the possibility for [Keycloak](https://www.keycloak.org) to connect via a user attribute.

## Use Case

If the username entered in the form
* does not match a primary identifier
* does not match email (if this option is enabled for realm)
* respect the desired regular expression

Then the search by attribute is activated
* if this search returns a single user, password verification is activated

## Installation

Just drop the jar into the _/opt/keycloak_ subdirectory of your Keycloak installation.

For example, you can add this snippet in a Dockerfile

```dockerfile 
WORKDIR /opt/keycloak

# plugins
ADD --chown=keycloak:keycloak https://repo1.maven.org/maven2/fr/cnieg/keycloak/attribute-login-provider/$PLUGIN_VERSION/attribute-login-provider-$PLUGIN_VERSION.jar providers/attribute-login-provider-$PLUGIN_VERSION.jar
``` 
## Configuration

Make sure that you have correctly configured an attribute for your users which can be used as an identifier alternative.

Switch to your realm in the keycloak administration console.

Switch to the "Authentication" configuration and copy the original browser flow, 
giving the copy it a reasonable name,
maybe "Browser with Attribute".

Then replace the "Username Password Form" execution by the new "Attribute Username Password Form" execution.

![Browser Flow Configuration](https://raw.githubusercontent.com/cnieg/keycloak-login-attribute/main/browser_flow_config.png "Browser Flow Configuration")

Configure this new step with your attribute name and choose a regex which can restrict calls and avoid expensives searches by attribute.

![Authenticator Configuration](https://raw.githubusercontent.com/cnieg/keycloak-login-attribute/main/authenticator_config.png "Authenticator Configuration")

Having done so you have to select your copy of the browser in the bindings tab for the browser flow.

# Keycloak Reset Credential Attribute

Like the Keycloak Login Attribute SPI, AttributeChooseUser adds the possibility for [Keycloak](https://www.keycloak.org) to reset credentials via a user attribute.

## Configuration

Make sure that you have correctly configured an attribute for your users which can be used as an identifier alternative.

Switch to your realm in the keycloak administration console.

Switch to the "Authentication" configuration and copy the original reset credential flow, giving the copy it a reasonable name, maybe "Reset Credential with Attribute".

Then replace the "Choose User" execution by the new "Attribute Choose User" execution.

![Browser Flow Configuration](https://raw.githubusercontent.com/cnieg/keycloak-login-attribute/main/reset_credentials_flow_config.png "Reset Credentials Flow Configuration")

Configure this new step with your attribute name and choose a regex which can restrict calls and avoid expensives searches by attribute.

![Authenticator Configuration](https://raw.githubusercontent.com/cnieg/keycloak-login-attribute/main/authenticator_config.png "Authenticator Configuration")

Having done so you have to select your copy of the browser in the bindings tab for the browser flow.

## License

See [LICENSE file](./LICENSE)

keycloak-login-attribute

keycloak-login-attribute 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

keycloak-login-attribute

keycloak-login-attribute 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README