A Keycloak authenticator to restrict authorization on clients

Keycloak Authentication Provider implementation to get a 2nd-factor authentication with a OTP/code/token send via SMS (through AWS SNS). Demo purposes only!

Keycloak: Home IdP Discovery - discover home identity provider or realm by email domain

Simple in-memory User Storage Provider SPI implementation for Keycloak. Demo purposes only!

Keycloak plugin for logins using phone number

A Keycloak provider that posts events to a URL via HTTP POST as JSON

A Keycloak provider which permits authenticate a user with a code sent on SMS

This project extends the Keycloak authentication server to cover complicated enterprise use cases such as multi-tenancy, custom storage, n-level resellers by extending Keycloak through its SPIs such as storage, authentication, and identity provider.

Argon2 Password Hash Provider for Keycloak

A Keycloak provider that enables encryption of user attributes that contain PII data to be automatically encrypted upon storing to database and then decrypted upon loading from database

Drop-in Email Provider SPI replacement for Keycloak to send emails via AWS Simple Email Service (SES). Demo purposes only

This code extends Keycloak for the provisioning of 2 Factor Authentication (2FA) through non-interactve API methods ✨ Project extends Keycloak with a custom RealmResourceProvider. This allows for 2FA via REST calls.

a Keycloak broker mapper that maps a multivalued OIDC claim (e.g.: groups) or SAML attribute (e.g.: groupMembership) into one or more realm and/or client role assignments based on regular expressions

Keycloak event listener provider implementation to send events either to a HTTP REST endpoint or to a JMS topic

A Keycloak Event Listener that logs errors or all events to Sentry

SAML authentication implementation with Keycloak for IdP and SP integration.

a Keycloak browser authenticator that enforces an impersonation policy restricting impersonators from accessing service providers (clients) unless holding an associated client role

HaveIBeenPwned Password Policy for Keycloak PoC

A Keycloak plugin to authenticate users using a link sent via email

A Service provider to consume keycloak API and provides authorization with laravel/lumen