Chained Elytron Authentication Mechanisms

[michael_jank]

Hi,

our applications have the need to be integrated with keycloak, on the other hand we have more detailed application dependent authorization in each application.

As keycloak is configurable with Elytron: would it be possible to configure keycloak authentication and have a second authentication mechanism afterwards which does this more detailed authorization?

Or am I forced to implement a custom authentication mechanism which handles these scenarios?

Thank you!

[mchoma]

I am not familiar with KeyCloak integration. But in general Elytron has aggregate-realm, which enables you to use one realm for authentication (could be KeyCloak?) and another for authorization (your app specific realm)

pcraveiro any idea?

[michael_jank]

Thank you, Martin.

Thats an information I obviously missed reading the docs...