Advanced OpenID Connect with Keycloak and Spring Security
Step-by-Step OAuth, OpenID Connect with Keycloak, GitLab, JWT, Multi Identity Providers, Identity Broker and Spring Boot
Lo que serás capaz de hacer
Recent Updates : All Spring Boot examples tested & updated with Spring Boot 3.5.9 , Java 25 & Keycloak 26.5.0 How do we use OAuth and OpenID Connect in real world Enterprise applications? How do we handle multiple OpenID Connect Identity Providers ? How do we use Identity Brokers for integration with SAML and Social Providers like Google, GitLab or Facebook? How do we mix OpenID Connect and OAuth using multiple Providers at the same time ? This course on OAuth and OpenID Connect builds on my previous course called Enterprise OAuth and OpenID Connect by using Keycloak as the Custom Identity Provider. Students will go through hands-on development using Keycloak , GitLab, Okta and Spring Boot 3.5.x/Spring Security 6.x . Students are expected to have some knowledge of OAuth and Spring Boot. WHAT THE LEARNERS ARE SAYING: 5 STARS - Viraj has excellent command over subject matter and is also great at teaching complex subject which is evident in this course. As a user of technologies mention in course including Keycloak at my job, I find this content extremely thorough and highly useful. Viraj has covered the topics in depth without making them boring (as one would find by reading RFCs). Congratulations and thanks to Viraj for producing another quality content!! 5 STARS - Viraj is an amazing teacher walking through each step. Its a pleasure to be in his class. 5 STARS - The course is detailed providing technical information. The instructor explains concepts in detail with supporting diagrams. Highly recommend this course for anyone interested in understanding concepts of OAuth and OpenID and step-by-step hands-on instructions. 5 STARS - I like the detailed approach on explaining the basic concepts. Well done. 5 STARS - Great presentation With the help of theory, plentiful Diagrams and code-centric content, students will learn the following. Overview of OAuth and OpenID Connect for Enterprise and Social Applications Protect OpenID Connect Applications using Scopes and Roles Create OAuth Microservices (Resource Servers) secured with JWT and Opaque tokens Learn how and when to use Client Credential grant type in Enterprise applications Learn how to handle Multiple OpenID Connect Identity Providers in Spring Boot Learn how to use Identity Brokers in Keycloak with Social Identity Providers like Google, GitLab, Facebook etc. Learn how to use Identity Brokers for OpenID Connect and SAML Integration Learn how to mix OAuth and OpenID Connect with Multiple Identity providers at the same time Understand about Cryptographic Hashing, Encryption and Digital Signatures using openssl Using a Course Project and Assignments, students will get Hands-On practice to implement all that is learnt in the sections. This course will take you to the next level in your understanding of Authentication and Authorization. Not only do we learn about real life OAuth and OpenID Connect programming but also the architectural Authentication/Authorization blueprints for an enterprise which will guarantee to make you an expert. There is a wealth of Information here; don't miss it. REMEMBER… I'm so confident that you'll love this course that we're offering a FULL money-back guarantee for 30 days! So it's a complete no-brainer, sign up today with ZERO risk and EVERYTHING to gain.
- Review of OAuth and OpenID Concepts for Social and Enterprise Applications
- Understanding Keycloak as an Identity and Access Management Provider
- Step-by-step use of Spring Security with Authorization Code with (and without) PKCE
- Step-by-step use of Spring Security with Client Credentials grant
- Step-by-step coding of OAuth 2 Clients, JWT and Opaque Resource Servers with Spring Security
- Designing Enterprise Authorization using Keycloak Scopes and Roles
Temario
UNIDAD 1 - Introduction to Keycloak · 6 leccionesUNIDAD 1 - Introduction to Keycloak
UNIDAD 1 - Introduction to Keycloak
- Architecture Diagrams
- Keycloak Overview
- Keycloak Installation and Setup
- Postgres Installation and setup
- Keycloak Postgres Setup
- Notes on Keycloak and Postgres setup
UNIDAD 2 - OAuth and OpenID Connect in a Nutshell · 12 leccionesUNIDAD 2 - OAuth and OpenID Connect in a Nutshell
UNIDAD 2 - OAuth and OpenID Connect in a Nutshell
- Section Introduction
- OAuth Actors
- Clients and Scopes
- Access Tokens and Endpoints
- Authorization Code and Refresh Token Grants
- Implicit Grant and PKCE
- Client Credential and Password Grants
- Third Party Versus First Party Application
- OpenID Connect
- Enterprise OpenID Connect and Roles
- RFC Documentation Links
- OAuth and OpenID Connect
UNIDAD 3 - Keycloak - OAuth Authorization with Scopes · 17 leccionesUNIDAD 3 - Keycloak - OAuth Authorization with Scopes
UNIDAD 3 - Keycloak - OAuth Authorization with Scopes
- Introduction - Project BugTracker
- BugTracker Demonstration
- BugTracker Keycloak Setup
- BugTracker Design
- Spring Security - OAuth Authentication
- BugTracker Service
- BugTracker OpenID Connect Configuration
- Spring Security - Authorized Client
- BugTracker Controller
- BugTracker with Authorization Code Grant
- BugTracker with PKCE
- BugTracker Authorization using Scopes
- Documentation links and Downloads for section
- Authorization with Scopes
- JAUBS - Course Project Explanation
- JAUBS - Protecting application using OpenID Connect
- Solution for Assignment 1
UNIDAD 4 - Keycloak - Roles and Multiple Identity Providers · 14 leccionesUNIDAD 4 - Keycloak - Roles and Multiple Identity Providers
UNIDAD 4 - Keycloak - Roles and Multiple Identity Providers
- Section Introduction
- Keycloak Mapper - Adding Roles claim
- BugTracker Authorization using Roles
- Note about running BugTracker with Roles
- JAUBS - Protecting Application using Roles
- Solution for Assignment 2
- Handling Multiple Identity Providers
- Client Registration in GitLab
- Spring Security and Multiple Identity Providers
- Customizing Authorities
- Problems with Multiple Identity Providers
- Download final BugTracker ZIP file for section
- Spring Security and Multiple Identity Providers
- JAUBS - External Identity Providers with Spring Boot
UNIDAD 5 - Keycloak - OAuth and Microservices · 12 leccionesUNIDAD 5 - Keycloak - OAuth and Microservices
UNIDAD 5 - Keycloak - OAuth and Microservices
- Section Introduction
- Creating an OAuth JWT Microservice (Resource Server)
- Spring Security - Resource Server
- Calling an OAuth Microservice
- Using Introspection Endpoint
- Multiple Identity Provider problem
- Enterprise Schedulers and Client Credentials Grant
- Client Credentials in Keycloak
- BugTracker Scheduler using Client Credentials
- Documentation links and Downloads for section
- OAuth Microservices
- JAUBS - Refactor code by creating a Bookstore REST API
UNIDAD 6 - Keycloak - Authentication Identity Brokers · 16 leccionesUNIDAD 6 - Keycloak - Authentication Identity Brokers
UNIDAD 6 - Keycloak - Authentication Identity Brokers
- Introduction to Identity Brokers
- Identity Broker HTTP Message Flow
- Setting up Gitlab Identity Provider in Keycloak
- BugTracker Identity Broker Integration
- JAUBS - Setup Keycloak as Identity Broker for Google and GitLab
- SAML Overview
- OpenID Connect and SAML Integration
- BugTracker SAML Usecase
- BugTracker SAML Integration with Okta
- Creating an Okta Integrator Account
- BugTracker Global Logout with Okta
- SAML Identity Provider - Assertion Encryption
- SAML Identity Provider - Setting User Attributes
- Documentation links and Downloads for section
- Authentication Identity Brokers
- JAUBS - Setup Keycloak as Identity Broker for Okta/SAML Integration
UNIDAD 7 - Keycloak - OAuth and OpenID Connect together · 8 leccionesUNIDAD 7 - Keycloak - OAuth and OpenID Connect together
UNIDAD 7 - Keycloak - OAuth and OpenID Connect together
- Handling Multiple Authorization Servers Simultaneously
- Spring Security configuration for OAuth
- Accessing GitLab Resource Server
- Spring Security - oauth2Login versus oauth2Client
- Fixing the Login Page
- Documentation links and Downloads for section
- OAuth and OpenID Connect together
- JAUBS - Add pure OAuth functionality
UNIDAD 8 - Conclusion · 3 leccionesUNIDAD 8 - Conclusion
UNIDAD 8 - Conclusion
- Conclusion
- Documentation Links
- Bonus Lecture
UNIDAD 9 - Supplementary Section - Cryptography Basics · 14 leccionesUNIDAD 9 - Supplementary Section - Cryptography Basics
UNIDAD 9 - Supplementary Section - Cryptography Basics
- Section Introduction
- Cryptography Theory and Practice
- URL Encoding
- Base64 Encoding
- Cryptographic Hashing
- Symmetric Encryption
- Asymmetric Encryption
- Hybrid Encryption
- Digital Signatures
- openssl - Base64, URL Encoding and Hashing Demonstration
- openssl - Symmetric Encryption Demonstration
- openssl - Asymmetric Encryption Demonstration
- openssl - Hybrid Encryption Demonstration
- openssl - Digital Signature Demonstration
UNIDAD 10 - Supplementary Section - Other Related Topics · 9 leccionesUNIDAD 10 - Supplementary Section - Other Related Topics
UNIDAD 10 - Supplementary Section - Other Related Topics
- Section Introduction
- Enterprise Versus OAuth Authorization
- OAuth Versus OpenID Connect (OIDC)
- Java Nested Classes
- Java Record - Model Immutable Data
- Java Thread Locals - ThreadLocal class
- Java Thread Locals - InheritableThreadLocal class
- Java Thread Locals - Disadvantages
- Spring Boot - Security Propagation
Tu certificado lo emite la SEP, no solo una plataforma
Al demostrar la competencia recibes un certificado emitido por la Secretaría de Educación Pública a través del Gobierno del Estado de México: un documento oficial que puedes presentar con confianza ante cualquier empleador o institución.
Tu certificado con INEC
- Lo emite la Secretaría de Educación Pública (SEP), a través del Gobierno del Estado de México
- Documento oficial con folio verificable en línea
- Lo otorga la Universidad Tecnológica Fidel Velázquez
Otras plataformas en línea
- Constancia privada emitida por la misma plataforma
- Solo acredita horas cursadas o asistencia
- Sin respaldo de una autoridad educativa
Tu itinerario, de la inscripción al certificado
- 1
Inscripción con pago único
Pagas $2,800 MXN una sola vez y entras de inmediato al curso.
- 2
Estudias a tu ritmo
10 unidades con videos, lecturas y actividades, disponibles 24/7 durante 12 meses.
- 3
Cuestionarios por unidad
13 cuestionarios para comprobar lo aprendido.
- 4
Certificado
Emitido por la SEP a través del Gobierno del Estado de México, con folio verificable.
Un certificado oficial de la SEP
Muestra · verificable por folio y QR
- Emitido por la Secretaría de Educación Pública (SEP), a través del Gobierno del Estado de México. No es una constancia privada: es un documento oficial, y ese respaldo marca la diferencia frente a otras plataformas en línea.
- Contenido impartido por Viraj Shetty.
- Folio y QR verificables para compartirlo con quien te contrate.
Empieza hoy, a tu ritmo
Un solo pago y acceso inmediato al curso completo durante 12 meses.
- 10 unidades · 111 lecciones · 50 h
- 12 meses de acceso
- 13 cuestionarios de evaluación
- Certificado emitido por la SEP (Gob. del Estado de México) con folio verificable
Sobre tu inscripción
¿Cómo es el pago?
Un solo pago de $2,800 MXN. No hay mensualidades ni cargos recurrentes.
¿Cuánto tiempo tengo acceso?
12 meses desde tu inscripción, 24/7, para avanzar a tu ritmo.
¿Quién imparte el contenido?
El curso es impartido por Viraj Shetty; INEC gestiona tu inscripción, evaluación y certificado.
¿Qué pasa cuando vence mi acceso?
Puedes renovar tu cuenta tú mismo desde la plataforma, sin trámites ni esperas.
