{"id":2901,"date":"2019-02-10T11:08:24","date_gmt":"2019-02-10T11:08:24","guid":{"rendered":"https:\/\/login-master.com\/keycloak-compared-to-login-master\/"},"modified":"2024-11-25T07:04:28","modified_gmt":"2024-11-25T07:04:28","slug":"keycloak-compared-to-login-master","status":"publish","type":"post","link":"https:\/\/login-master.com\/en\/keycloak-compared-to-login-master\/","title":{"rendered":"How to extend Keycloak with professional IAM functions"},"content":{"rendered":"

[et_pb_section bb_built=”1″ _builder_version=”3.22″ global_colors_info=”{}” next_background_color=”#000000″][et_pb_row _builder_version=”3.25″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”3.0.47″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.10.8″ text_line_height=”1.8em” header_font_size=”29px” header_2_font=”||||||||” header_2_text_color=”#000000″ header_2_font_size=”25px” header_2_line_height=”1.5em” vertical_offset_tablet=”0″ horizontal_offset_tablet=”0″ hover_enabled=”0″ z_index_tablet=”0″ text_text_shadow_horizontal_length_tablet=”0px” text_text_shadow_vertical_length_tablet=”0px” text_text_shadow_blur_strength_tablet=”1px” link_text_shadow_horizontal_length_tablet=”0px” link_text_shadow_vertical_length_tablet=”0px” link_text_shadow_blur_strength_tablet=”1px” ul_text_shadow_horizontal_length_tablet=”0px” ul_text_shadow_vertical_length_tablet=”0px” ul_text_shadow_blur_strength_tablet=”1px” ol_text_shadow_horizontal_length_tablet=”0px” ol_text_shadow_vertical_length_tablet=”0px” ol_text_shadow_blur_strength_tablet=”1px” quote_text_shadow_horizontal_length_tablet=”0px” quote_text_shadow_vertical_length_tablet=”0px” quote_text_shadow_blur_strength_tablet=”1px” header_text_shadow_horizontal_length_tablet=”0px” header_text_shadow_vertical_length_tablet=”0px” header_text_shadow_blur_strength_tablet=”1px” header_2_text_shadow_horizontal_length_tablet=”0px” header_2_text_shadow_vertical_length_tablet=”0px” header_2_text_shadow_blur_strength_tablet=”1px” header_3_text_shadow_horizontal_length_tablet=”0px” header_3_text_shadow_vertical_length_tablet=”0px” header_3_text_shadow_blur_strength_tablet=”1px” header_4_text_shadow_horizontal_length_tablet=”0px” header_4_text_shadow_vertical_length_tablet=”0px” header_4_text_shadow_blur_strength_tablet=”1px” header_5_text_shadow_horizontal_length_tablet=”0px” header_5_text_shadow_vertical_length_tablet=”0px” header_5_text_shadow_blur_strength_tablet=”1px” header_6_text_shadow_horizontal_length_tablet=”0px” header_6_text_shadow_vertical_length_tablet=”0px” header_6_text_shadow_blur_strength_tablet=”1px” box_shadow_horizontal_tablet=”0px” box_shadow_vertical_tablet=”0px” box_shadow_blur_tablet=”40px” box_shadow_spread_tablet=”0px” global_colors_info=”{}” sticky_enabled=”0″]<\/p>\n

\n

Which Keycloak extensions you need to build an professional IAM solution: Keycloak compared to login-master<\/h1>\n

Keycloak is used in numerous projects for authentication and authorisation in Web applications. Login-master is based on Keycloak, supplements its functionality in relevant areas like user management or access control. In that way it creates a suitable identity and access management solution for enterprise requirements.<\/strong><\/p>\n

Keycloak<\/a>\u00a0is an open source solution for identity and access management (IAM), which is geared towards the development of modern applications and services. The community version provided by Red Hat is available as open source under the name Keycloak. There is also a chargeable\/commercial version from Red Hat: Red Hat SSO (Single Sign-On).<\/p>\n

There are numerous projects in which Keycloak is used for the protection of Web portals, whether in the e-commerce, B2B or also public sector. This is understandable, because Keycloak provides extensive functions such as, for example, quick and reliable authentication, protection of (Web) applications and much more.<\/p>\n

The Red Hat project, which has existed for more than four years (10 September 2014), arose from the merger of\u00a0PicketLink<\/a>\u00a0with the newly created SSO solution, Keycloak. PicketLink had the objective of ensuring the security and protection of Java applications.<\/p>\n

We at the\u00a0Login Alliance<\/a>\u00a0have worked with Keycloak for more than three years. We evaluated the single sign-on solution (SSO solution) from Red Hat and evaluated various other systems. In addition, several of our customers chose Keycloak, because it is secure, modern, very reliable and easy to use.<\/strong><\/p>\n

Is Keycloak a complete enterprise IAM solution?\u00a0<\/strong><\/h3>\n

Many companies would like to use one of the two Red Hat solutions as an IAM system. They ask themselves why we don\u2019t exclusively use Keycloak as a holistic IAM solution. Ultimately, this solution already contains user and access management out-of-the-box.<\/p>\n

The reason is obvious: From our many years of experience, we know that the Keycloak components merely satisfy simple, rudimentary requirements. They mostly are not sufficient for more complex, enterprise applications and portals. For example, the Keycloak functions by far do not satisfy the requirements of data protection in accordance with the\u00a0European General Data Protection Regulation<\/a>\u00a0(EU-GDPR).<\/p>\n

Can Keycloak form the basis of an enterprise IAM solution?<\/h3>\n

Red Hat writes the following about this: \u201cRH SSO should be able to cover most use-cases using native functionality; however, the reality of enterprise environments is that customizations are usually required. This is especially true when dealing with web-based applications.\u201d<\/p>\n

This appraisal by Red Hat coincides with the requirements of enterprise customers, because they want:<\/strong><\/p>\n