Skill · Identity and access · Centralize identity and access
Federate an LDAP or Active Directory directory and a partner identity provider into Keycloak
Map the structure of an LDAP or Active Directory directory and federate it into Keycloak (URL, bind DN, users DN, edit mode, synchronization, delegated authentication, attribute and group mappers), then delegate login to a partner OIDC identity provider: declare it, map email, name and a default group, read the first login, refuse automatic account linking by email and send the user to the IdP with kc_idp_hint.
Start lesson 1The Identity and access domain
- 2 lessons
- ~1 h 20 of reading
- 2 quizzes
- 0 proof lab
The path
Where it comes from, where it leads
What you need to know first, where you stand on this skill, and what it opens next. Your status is computed in your browser, from what you have read and passed.
Before · 1 prerequisite
Recommended before · 1
This skill, for you
Federate an LDAP or Active Directory directory and a partner identity provider into Keycloak
Computing
It unlocks · nothing yet
No other skill requires it: it is an end-of-path skill.
The path through the foundations From the most upstream foundation to this skill: what is in place, what remains to read.
Lessons
How to learn it
2 lessons, about ~1 h 20, in program order. Each lesson ends with its quiz.
The program
2 lessons · ~1 h 20
Beyond the lessons
Assess, practise, pass the proof
Reading a lesson confirms nothing. A skill is confirmed by a passed quiz, practised in a guided lab, and put to the test by a challenge or a mission; an imported lab result is not verified by the site.
Assess yourself
2 quizzes
At the end of the lessons: passed at 70%, they confirm the skill.
Practice
No guided lab
No guided lab practices it yet.
Proof
No proof
Neither a challenge nor a mission with a proof yet.
Going further
Reference pages: they support the skill without teaching it, and do not count in your journey.
Prepare the environment
To do before the labs: these pages do not teach the skill, they set up what you need to practice it.
Placement test
Preparing the questions…
Your answers in detail
For each question asked: your answer, the correct answer, its explanation and the page to reread.
Around it
Who requires it, who teaches it
Required by
Taught by
Same block · Centralize identity and access
- Set up Keycloak on PostgreSQL and administer a realm: users, groups, roles and event logs
- Connect an application to an identity provider with OpenID Connect, validate its tokens and troubleshoot an OIDC or SAML integration
- Protect an API with OAuth 2 tokens: audience, scopes, machine access and choosing the flow of a client without a browser
- Require a second factor per group in Keycloak, with forced enrolment and recovery, and set a password policy compliant with NIST SP 800-63B-4
- Manage the account lifecycle in Keycloak with SCIM and Workflows, handle a departure and run an access review
- Run Keycloak in production: TLS proxy, restored backup, version upgrade, emergency access and a realm described in Terraform
- Connect the Kubernetes API server and Vault to an OIDC identity provider, turn token groups into limited rights and diagnose a denial