IAM sovereignty has become a strategic necessity rather than a purely technical option. IAM sovereignty has become a strategic necessity rather than a purely technical option. janua.fr/iam-the-hidden-gdpr…

Retrofit OT : ajouter plutôt que modifier. On s'est régulièrement frotté à la question de « sécuriser » une machine industrielle, trust-buster.fr/blog/retrofi…

Démonstration de sécurité d'un contrôle d'accès d'atelier. On nous demande généralement si « c'est chiffré ». trust-buster.fr/blog/princip…

La sécurité au bout de la prise électrique...Pourquoi le dernier point d'application de la politique de sécurité que nous devons implémenter est la prise de courant. Articles destinés aux praticiens de l'IAM. trust-buster.fr/blog #IAM #security #OT

There is an interesting provider for that : EventListeners. Instead of writing specific EventListeners, we chose a different way. janua.fr/how-to-make-your-cu…

How to protect your privacy with a secondary email in Keycloak: when authenticating with external services via OAuth2/OpenID Connect, your primary email address is often shared... janua.fr/protect-your-privac… #keycloak #privacy #authentication #IAM

A custom http header to token claim mapper for Keycloak : we implement everything for our customers’ use cases. One of our clients asked us: how to pass the locale when authenticating in “client_credentials”? janua.fr/a-custom-http-heade… #keycloak #opensource #security #Authentication

ReCyF / NIS2: IAM at the heart of cyber compliance. Objective 10 — Identity and Access Management (IAM) — is a central pillar, . This article breaks down these requirements and explains how a sovereign IAM solution like Keycloak addresses them. janua.fr/iam-regulatory-comp…

How to get self-locking sessions in Keycloak with PIN step-up authentication : with our partner Please-Open It with share with you this article. janua.fr/self-locking-sessio… #keycloak #redhatSSO #CIAM #SSO #community

Get rid of your old Active directory/LDAP with keycloak and a small piece of custom software : just a POC for a LDAP bind proxy to log to KeyCloak with LDAP. janua.fr/ldap-bind-proxy-how… #keycloak #redhatsso #IAM #CIAM #OpenSource

Keycloak OAuth2-Proxy Configuration Generator: we strongly advocate the use of authentication proxy pattern, the most efficient ways to secure applications without modifying their code. janua.fr/simplify-your-rever… #keycloak #redhatSSO #SSO

What is and how to use Keycloak Authenticator. An « authenticator » is a step in an authentication process, called « Authentication flow ». An impressive list of authenticators are available with Keycloak : janua.fr/keycloak-authentica… #keycloak #redhatSSO #SSO #CIAM #IAM

How to simplify authentication in any application with an authentication proxy ? Over the years, we’ve encountered the same challenges repeatedly. janua.fr/authentication-prox… #keycloak #redhatSSO #security #community

Keycloak roles restriction and full scopes. Learn with this article how and why you must restrict roles in tokens by turning off « full scope allowed » switch. janua.fr/keycloak-roles-rest…

Keycloak roles restriction and full scopes : for security concerns, you must restrict roles to a subset through the « Full Scope Allowed » janua.fr/keycloak-roles-rest…

With our partner please-open.it we implement everything necessary for our customers’ use cases. . How to make your custom workflow with Keycloak ? janua.fr/how-to-make-your-cu… #keycloak #IAM #SSO

A JWT decoder in the system tray, to enhance your productivity setting up KeycCloak. With our customers, we decode JWT tokens dozens of times a day. janua.fr/a-jwt-decoder-in-th… #keycloak @redhatSSO #SSO #IAM

A custom http header to token claim mapper for Keycloak : Our main partner please-open-it implement everything necessary for our customers’ use cases. And one of our clients asked us: how to pass the locale when authenticating in “client_credentials”? #keycloak #redhatsso