p2-inc / phasetwo-docs Goto Github PK

Okta, Azure, etc.

http://localhost:3000/docs/user-migration/

add screenshots for user federation setup

Update audit logs docs to indicate logs only stored for paid plans.

http://localhost:3000/docs/admin-portal/

Since we will use the templates (in template/blog) many times for each framework, and each time we have someone set up a deployment/realm/user/etc., it would be nice to be able to quickly collapse that section (i.e. the user things "yeah, yeah, I've already done this in a previous tutorial) to easily be able to skip to the different "meat" of the article.

Make an article targeted at WorkOS, Frontegg, etc. SSO and Admin Portal functionality using the content from https://phasetwo.io/docs/sso/sso-without-auth

Focus on:

• Open source, based on Keycloak
• Can be deployed on-prem
• How to setup/store idp alias per organization
• Scalable pricing model (i.e. We democratize SSO)

https://docs.google.com/document/d/1FAwPwXivX9oFqAmnuZmzkBwVqIkVpQ9Sq6WxZ-ysqqg/edit

The docusaurus openapi plugin we use has many bugs and isn't well-maintained https://github.com/cloud-annotations/docusaurus-openapi

Consider using vanilla swagger UI for API docs:

• in a separate github pages repo: https://github.com/peter-evans/swagger-github-pages
• as a react component inside src/pages/api.js https://www.npmjs.com/package/swagger-ui-react

Draft a mutual blog post announcing Keycloak CRDB support and the launch of dedicated clusters built with Keycloak + CRDB serverless.

Similar based on an authorization product

• https://www.cockroachlabs.com/blog/authzed-and-cockroachdb/
• https://www.cockroachlabs.com/blog/scale-out-oltp-database/

When you click on the ||| menu, the menu renders in a way that cannot be used.

Don’t write your own authentication, we already did it for you
Solve authentication now and in the future
Would you write your own stripe for authentication

add an API section to the Docs

https://github.com/keycloak/keycloak-documentation/blob/main/server_admin/topics/clients/oidc/service-accounts.adoc

https://www.keycloak.org/docs/latest/server_admin/index.html#_service_accounts

add the proper roles to give the service account user access to the resources you want to access.

On the client configuration page, under Service Account Roles, choose the Client Roles for “realm-management” and add the proper roles to you custom client.

Also make sure the mapper “roles” is added to your client scope.

• Passport.js “strategy”
• migration service

You don’t know the problems until you have them
SSO problems you don’t know you have until you try to build it yourself

We use AGPL for our Keycloak extensions:

• To allow anyone to use and host them in an unmodified fashion.
• To prevent a competitor from using them without releasing modifications and their own Keycloak improvements.

Our position is that the use of AGPL does not require users to use the same license for their whole stack, but only for extension and Keycloak modifications.

Perhaps the most important point is that "dual" licensing is available to paying customers, where they can use and host our extensions without the AGPL license requirements.

Reducing non-functional requirements for your IT team
Best tool for your IT admin

Discourse top questions
https://keycloak.discourse.group/top?period=all

GitHub discussions top questions
https://github.com/keycloak/keycloak/discussions?discussions_q=sort%3Atop

StackOverflow top questions
https://stackoverflow.com/questions/tagged/keycloak?tab=Votes

http://localhost:3000/docs/sso/

setup and wizards need completion

Add welcome-email extension
Upload templates to realm attribute

http://localhost:3000/docs/hosting/

After page has been scrolled, you can't scroll back up to the "top" anymore

make this general for cloud and on-prem

http://localhost:3000/docs/authentication/complex-flows

Not a big deal, but will produce a warning and affect code generation.

https://github.com/p2-inc/keycloak-events/blob/main/src/main/java/io/phasetwo/keycloak/resources/WebhooksResource.java

https://github.com/p2-inc/keycloak-events/blob/main/src/main/java/io/phasetwo/keycloak/resources/RealmAttributesResource.java

Add to "SSO" section of docs. Need video.

Shouldn't be there. Possibly a bug in the plugin we use.

Logo, colors, style

Logo upload
CSS upload

Need to have a single reference for all Phase Two custom realm attributes, what they do, and when/how to use them. E.g.

• _providerConfig.assets.login.backgroundColor
• _providerConfig.assets.login.primaryColor
• _providerConfig.assets.login.secondaryColor

https://github.com/orestbida/cookieconsent

Try this as a model for how to use with an existing framework commonly used for SaaS.

https://keycloak.ch/keycloak-tutorials/tutorial-webauthn/

https://github.com/keycloak/keycloak-documentation/blob/main/server_admin/topics/authentication/webauthn.adoc

keycloak/keycloak#12102

https://blog.please-open.it/auth_user_experience/

Laravel

• https://github.com/robsontenorio/laravel-keycloak-guard
• https://socialiteproviders.com/Keycloak/
• https://github.com/mariovalney/laravel-keycloak-web-guard

Django

• https://blog.jonharrington.org/static/integrate-django-with-keycloak
• https://www.informaticsmatters.com/blog/2021/06/01/installing-keycloak-on-Django-rest-framework.html
• https://github.com/Amsterdam/keycloak_oidc
• https://mozilla-django-oidc.readthedocs.io/en/stable/drf.html
• https://pypi.org/project/mozilla-django-oidc/

Video and screenshots of how to setup outbound email.

• Authentication
  • Understanding flows
  • Username-password
  • Social login
  • Magic links
  • TOTP
  • WebAuthn / Passkeys
  • SSO

Need some default flows in the self-serve created realms. Add a project that contains the realm-prototype.json file outside of the private projects.

http://localhost:3000/docs/authentication/sso

https://docs.google.com/document/d/18VsMZRnKC1zCeLICGeVkx5AWWA6dvIC_RD2ZtsNZTMk/edit

shows :///auth/realms instead of https://<host>/auth/realms

http://localhost:3000/docs/securing-applications/backend

• java https://github.com/p2-inc/phasetwo-java
• js https://github.com/p2-inc/phasetwo-js
• python https://github.com/p2-inc/phasetwo-python
• php
• go
• ruby