Repository navigation
Replies: 2 comments 8 replies
|
As far as I know that would not be possible since Keycloak fundamentally relies on realms to separate users and client configurations - e.g. the master realm is for administration purposes only, while other realms serve clients - which makes the |
|
It would be possible if we are able to register alias path that resolves at server side. What about url-rewrite at reverse-proxy layer? Would that work? |
|
I'm not sure, I have not tried it myself. It may be possible to do it through the reverse proxy, since it terminates the client connection and sends a (possibly modified) request to the backend, which can in turn be directed to a different endpoint. However, I assume that it would also limit your access to a single realm and protocol. It is also likely possible to change the endpoint format using an SPI, which would basically create additional endpoints (like the one you have mentioned - Would you mind sharing why accessing the authentication endpoint in this manner would be required? Is it simply cosmetic, or is there a different requirement? |
|
Hi, I have similar requirements and challanges to get it done as I'm not able to make a working reverse proxy setup.
2.) it is a security feature as you cannot easily butforce check what other realms are setup and what kind of openid-connect implementation (here keycloak) is used. using the Frontend Url in the realm configuration is working partly.. except it allways is adding the realm/MYREALM/ part to it and ofcaurse all the js and css stuff which is loaded afterwards. So this would be a realy nice feature.. at least for me Best |
I have the same request, in our case its mostly cosmetics but also we are migrating from direct grant flow to the regular browser authentication flow, but would like to avoid disruptions to our users. Ideally the URL stays mostly the same so that users would only notice a slight change in the design and be able to trust that they are still providing username + password to us and not some other site. |
|
@Eng-Fouad you can use direct grant flow, and implement your own login page with url you like |
|
Thanks for the reply, but it cannot be the solution I need to write my own login screens incl. password reminder ... and for social indentity provider . This makes the use of this product useless and I can implement it directly in my backend. On the one side it is cosmetics.. on the other side it shoudl bot be possible that someone with knowledge can just change the url to spoof other existing realms. So it is also an security erquirement. Are we realy the only once with the wish to hide https://bla.com/realms/deltra/account/ behind something like |
|
Nope. Even our team is also looking for a similar solution. @gluggi did you guys figure it out? |
|
Hi, eventually we moved away from keycloak. So the answer is no. Cheers |
|
@gluggi @allenjoseph29 What did you guys end up going with? Our team is strongly considering it too, but I'm a bit disappointed with the lack of customization. |
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
Is it possible to customize URL of the login page?
Something like:
to:
All reactions