How to configure SSO , IDP,SP on wildfly 11 final using picketlink or keycloak or which is best to use ?

[wildfly1]

How to  configure SSO , IDP,SP  on wildfly 11  final using  picketlink or keycloak or which is  best  to use ?

[claudio4j]

See this tutorial Web Single Sign-On - Latest WildFly Documentation - Project Documentation Editor

[mchoma]

PicketLink is deprecated in favor of KeyCloak

[wildfly1]

Hello Matin ,

Thanks for the reply  do you know any documentation  to  setup keycloak on wildfly  for Single Sign on ,Identity Provider ,Service Provider ,

Also we  have  IDP as Okta

Thanks,

[wildfly1]

Hello Claudio ,

Thanks for sharing this doc , I have seen  this in that doc "

"Enable Single Sign-On"

/subsystem=undertow/application-security-domain=other/setting=single-sign-on:add(key-store=example-keystore, key-alias=localhost, domain=localhost, credential-reference={clear-text=secret}) After  I enable the SSO how can I  do configuration  for Identity provider , Service Provider by Using SAML 2.0 Thanks, Lily

[mchoma]

Web SSO is not meant for SAML 2.0. I think you should go with KeyCloak way. Try maybe KeyCloak forum.

[wildfly1]

Hello Martin ,

I have gone  through docs  and have seen latest version of keycloak  for wildfly  server .

We have Wildfly server with  three instances  in standlaone mode  and wants  to configure with keycloak  with SAML 2.0 standards and OKTA

https://www.keycloak.org/downloads.html

Which  one we can  have  on our wildfly  11 version  is it Standalone server distrbution or the  client  Adapters SAML 2.0  please refer to above  link ?

Thanks,

Lily

[wildfly1]

Hello All,

We are trying to configure Single sign on , Identity provider , service provider  on a wildfly 11final   non -prod env which has  3 standalone instances .

We have  one wildfly server host nlm0001  and in it we have  3 standlaone instances( With different Management consoles)  running  on the  same host nlm00001.

I have installed  keycloak 4.0.0. beta 3 on nlm00001 .

1st doubt :

1)do I have to  build keycloak  as a saparate  host  instead of  installing on same  host  nlm00001

2) do I have  to configure and anything related  to  existing 3 wildfly instances  of nlm0001  in keycloak admin console ?