4 Domains before Identity and access 1 Domains after
Skills · Identity and access
Identity and access
8 skills to acquire.
Start · Set up Keycloak on PostgreSQL and administer a realm: users, groups, roles and event logsAll skills
- 8 skills to acquire in this domain
- 1 step in the order you learn them
- 0/8 acquired from your progress, in this browser
- 4 prerequisite domains to know before starting here
Your path
The domain's steps
In the order you learn them: each step builds on the previous one. Your status is computed in your browser, from what you have read and passed (quizzes, labs).
-
Centralize identity and access
See the 8 skills
- Set up Keycloak on PostgreSQL and administer a realm: users, groups, roles and event logs
- Connect an application to an identity provider with OpenID Connect, validate its tokens and troubleshoot an OIDC or SAML integration
- Federate an LDAP or Active Directory directory and a partner identity provider into Keycloak
- Protect an API with OAuth 2 tokens: audience, scopes, machine access and choosing the flow of a client without a browser
- Require a second factor per group in Keycloak, with forced enrolment and recovery, and set a password policy compliant with NIST SP 800-63B-4
- Manage the account lifecycle in Keycloak with SCIM and Workflows, handle a departure and run an access review
- Run Keycloak in production: TLS proxy, restored backup, version upgrade, emergency access and a realm described in Terraform
- Connect the Kubernetes API server and Vault to an OIDC identity provider, turn token groups into limited rights and diagnose a denial
No skill matches this filter.