Keycloak in Front of Active Directory: User Federation, MFA, and Common Pitfalls

Wed, 15 Jan 2025 10:00:00 +0000

What this is about

In most enterprises, the truth about identities still lives in Active Directory. Meanwhile, modern applications have long since standardized on OIDC or SAML — protocols that AD doesn’t natively offer. Maintaining two user stores isn’t an option. This is where Keycloak in front of AD comes in: Keycloak federates against the existing AD, takes over the role of Identity Provider, adds MFA, and delivers the protocol coverage that AD alone will never provide.

Technical Blog on David Picillo - Cloud DevOps Engineer

Keycloak in Front of Active Directory: User Federation, MFA, and Common Pitfalls

What this is about