Keycloak OIDC Broker

[cyberjeff-u8t]

Is there any roadmap to add additional broker like Keycloak ?

[mmendozaf]

This is a good request as KeyCloack is widely

[adombeck]

It's already possible to use Keycloak via the authd-google broker (which really is just a generic OpenID Connect broker).

You need to set up a client in Keycloak, choose a client ID and enable OAuth 2.0 Device Authorization Grant. Then edit /var/snap/authd-google/current/broker.conf and set:

[oidc]
issuer = <your-keycloak-domain>/realms/<your-realm>
client_id = <your-client-ID>

Then restart the broker:

sudo snap restart authd-google

You should then be able to log in with any user of the configured Keycloak realm.