This repository contains development of a set of authenticator extensions for enhancing authentication capabilities with Keycloak and/or RedHat SSO with IBM Security Verify.

Current version extensions support Keycloak 10.0.1 and RedHat SSO 7.4. Please refer to the Release Notes in the User Guide for version specific support levels.

Please refer to the User Guide attached to each release for detailed information on deploying and using the extensions.

• IBM JRE 1.8
• Docker
• Maven
• IBM Security Verify (Free Version)
• IBM Verify Mobile Application (iOS & Android)

mvn clean install from the root directory - creates a verify-keycloak Docker image

The build process creates a Keycloak/RedHat SSO compatible extensions JAR with the IBM Security Verify authenticator extensions. The JAR file is placed into a Keycloak SSO docker image into the <root_dir>/standalone/deployments directory and will be deployed automatically when the image is started. Please refer to Deployment Scripts for a list of commands that manage the built image.

In the <root_dir>/dev/scripts folder:

• start.sh : starts the Keycloak instance with built extensions
• stop.sh : stops the Keycloak server
• removeImage.sh : remove existing Keycloak extensions image
• removeVolumes.sh : remove all Keycloak instance data
• copyJars.sh : copies newly built extensions JAR into running Keycloak instance

By default, the deployed instance can be accessed on http://localhost:8080

• Create a fork of master and name it after the feature you are implementing (e.g. account_attribute_support)
• Follow the Project Structure & Coding Guidelines
• Create a pull request when feature is complete

• IBMSecurityVerifyAuthenticators
  • src/main/java
    • com.ibm.security.verify.authenticator - Abstract classes
    • com.ibm.security.verify.authenticator.<authenticator_name> - Authenticator specific implementations
    • com.ibm.security.verify.authenticator.rest - Authenticator ReST implementations
    • com.ibm.security.verify.authenticator.utils - Logging
  • src/main/resources
    • META-INF/services - Authenticator registration
    • theme-resources - Localization, images, and templates
• verify-keycloak - Docker image builder
• dev - Docker YAML file and utility scripts
• pom.xml - Main Maven build file

IBM Airways is a demo application developed with ReactJS and Carbon Design System components that demonstrates Keycloak SSO integration in a consumer application. More information on usage can be found in the project's repository.

Please open a GitHub issue to report any problems with the authenticator. The repository is actively monitored

Jason Choi: jason.choi1@ibm.com