Repository navigation
MetaMask as an Identity provider for keycloak #16799
|
Hi guys! If there is no such thing implemented, any ideas how i can implement it, for example, as new Identity provider? |
Replies: 2 comments
|
If someone will need this, I just end up using hosted OIDC with eth wallets support https://docs.login.xyz/servers/oidc-provider/hosted-oidc-provider. This OIDC I added as an Identity providers OIDC integration on keycloak. |
|
For anyone still landing here from search: I ended up building this as a proper Authenticator SPI plugin — Sign-In with Ethereum (SIWE / EIP-4361) and Solana (SIWS), for both EOA and smart-contract wallets (EIP-1271, plus EIP-6492 counterfactual signatures), running as one authenticator inside your existing browser flow. No second OIDC server to federate, no wallet SDK on the backend, and no new infrastructure — the single-use nonce lives in Keycloak's own authentication-session notes.
It's tested end-to-end against a real Keycloak 25 in Testcontainers and verified with real MetaMask and Phantom. It's early — if you try it and something breaks, an issue on the repo would be very welcome. |
If someone will need this, I just end up using hosted OIDC with eth wallets support https://docs.login.xyz/servers/oidc-provider/hosted-oidc-provider. This OIDC I added as an Identity providers OIDC integration on keycloak.