SSO For Small Ecosystems
One identity provider, every service, and the token-mapping details that don't show up in the setup guides.
Forward
One identity provider, every service, and the configuration that makes it work. This book is a wo...
Deploying Keycloak
Everything else in this book assumes a working Keycloak that applications can reach over HTTPS an...
Configuring Keycloak
A running Keycloak does nothing useful until you decide how realms are split, how users prove who...
Configuring Discourse (identity-only pattern)
Pattern: identity only. Discourse authenticates users through Keycloak but does no group or role ...
Configuring BookStack (group-aware pattern)
Pattern: group-aware. BookStack authenticates users through Keycloak and reads their group member...
Configuring a Flask app (build-it-yourself pattern)
Pattern: build it yourself. Discourse and BookStack are someone else's applications where you con...
Appendix A - SSO Test App
Clone the repo into a location capable of serving a python flask application. git clone https://g...