The Leading Edge of AuthN and AuthZ by Keycloak - Takashi Norimatsu & Thomas Darimont
Channel: CNCF [Cloud Native Computing Foundation]
Date: 2024-03-23

Don't miss out! Join us at our next Flagship Conference: KubeCon + CloudNativeCon North America in Salt Lake City from November 12 - 15, 2024. Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at https://kubecon.io

The Leading Edge of AuthN and AuthZ by Keycloak - Takashi Norimatsu, Hitachi & Thomas Darimont, Codecentric AG

The first part of this talk describes the latest feature of Keycloak: Passkey. We will demonstrate how to use Passkey for secure passwordless authentication. The first part of this talk also describe ongoing working item by Keycloak's community: OAuth 2.1, the next version of OAuth 2.0. We will demonstrate how to use OAuth 2.1 for secure authorizaion of API accesses. In Europe, interest in De-centralized Identity (DID) and Self-Soverin Identity (SSI) has increased because the European Commission released the European Digital Identity Wallet Architecture and Reference Framework for eIDASv2. To ensure Keycloak is ready for this new identity paradigm, the Keycloak's community is working on supporting features for DID and SSI. The first part of this talk describes this work briefly. The second part of this talk gives a glimpse of an advanced fine-grained authorization with Keycloak and Open Policy Agent (OPA). We will also present these work-in-progress topics in a demo.