This document discusses identity-as-a-service (IDaaS) and single sign-on (SSO) using OpenShift. It introduces Keycloak, an open source SSO solution. The presentation includes demos of Keycloak's SSO capabilities, integration with Google Authenticator for two-factor authentication, social login via Facebook/Google, customizable login pages using themes, and other features like user registration, password recovery, and email verification. The goal is to illustrate how Keycloak can provide IDaaS and SSO functionality for applications deployed to OpenShift.

1. ID-as-a-Service and SSO with
OpenShift
Ricardo Martinelli de Oliveira
Senior Technical Support Engineer – Red Hat
Twitter: @rimolive
http://aprendendo-cloud-computing.blogspot.com

2. Agenda
● Cloud Computing and its “flavors”
● ID-as-a-Service
● Keycloak
● Demos... Lots of them...
Cool Stuff

3. Cloud Computing
● Self-service on-demand
● Broad Network Access
● Resource Pooling
● Rapid Elasticity
● Measured Service
● Ubiquitous computing
Cool Stuff

4. What’s your favorite flavor?
● IaaS => Infrastructure-as-a-Service
● PaaS => Platform-as-a-Service
● SaaS => Software-as-a-Service
Cool Stuff

5. What’s your favorite flavor?
● IaaS => Infrastructure-as-a-Service
● PaaS => Platform-as-a-Service
● SaaS => Software-as-a-Service
Cool Stuff

6. But wait! there’s more
● DBaaS => Database-as-a-Service
● xPaas => Extended-Platform-as-a-Service
● IDaaS => Identity-as-a-Service (Focus on this
presentation)
Cool Stuff

7. One login rules all
Cool Stuff

8. Meet Keycloak
Cool Stuff

9. What is Keycloak?
● SSO for browser applications
● Oauth authentication for REST Services
● Optional User Registration
● TOTP Support (using Google Authenticator)
● Social Login
● And much more...
Cool Stuff

10. Cool Stuff
DEMO – SSO

11. What about TOTP?
● Easy Integration with Google Authenticator
● Similar to Two-phase login in Google services
Cool Stuff

12. Cool Stuff
DEMO – Google Authenticator

13. I want more! Social Login
● Integration with Facebook, Google, Github and
Twitter
● Can add additional social providers via SPI
Cool Stuff

14. Cool Stuff
DEMO – Social Login

15. Custom Login pages
● Keycloak support pluggable themes for login,
user registration and other
Cool Stuff

16. Cool Stuff
DEMO – Themes

17. I need more features!
● User registration
● Forget Password
● Remember Me
● Verify Email
● Security Audit
Cool Stuff

18. Cool Stuff
DEMO – Other Features

19. Cool Stuff
Thank you!