How to replace keycloak with Anyother SSO in Microcks

[sathishsoft2409]

I have done it in service but i need to do it in UI please help on this

[lbroudoux]

Hi @sathishsoft2409
Replacing Keycloak with another SSO is not planned at the moment and I don't know how to do this. Could you explain why you'd like to do this?

Do you know that Keycloak can be used as an Identity broker for other SSO solutions? We have users in the community who are using it in combination with Azure AD or Social Identity brokering. It's just a matter of configuring it that way. See https://www.keycloak.org/docs/latest/server_admin/index.html#_identity_broker

[lbroudoux]

Have you considered integrating both like describe in https://scureq.medium.com/forgerock-identity-management-and-keycloak-as-an-identity-provider-why-not-17182e1b5887 ? Keycloak can be truly transparent and that way you can still use it to have Microcks manage its group memberships.

[sathishsoft2409]

@lbroudoux

As look into this, It is doing auth via keycloak to forgerock but our requirement is we have a SSO url provided by our organization so we need to redirect microck application to the particular SSO url. we do not need to use any intermediate here.
Also i done the changes from service layer, but while trying to follow the step in the below URL
https://backstage.forgerock.com/docs/sdks/latest/sdks/integrations/build-protected-angular-web-app.html
in UI I can see lot of error because of low version of angular. I tried to update Angular version but lot of dependency is missing. Please suggest some idea to replace keycloak from UI

[lbroudoux]

I didn't go through the whole post I admit. But from my experience, using Keycloak this way can be totally transparent as it can redirect to other provider directly. That way you don't even see the Keycloak UI, you're just using the target provider UI.

For that, your external provider must be configured as the only one available.

[sathishsoft2409]

@lbroudoux Thanks i got you it is worked. But there is an issue in Microcks authetication with keycloak Please have a look on below issue

#1232

[lbroudoux]

Hey @sathishsoft2409
I don't see any update on the issue #1232 . Did you collect the Kecyloak server logs to guess the origin of the 401 response?