Map Keycloak Client Roles to Jenkins Groups
In a previous post, we integrated Jenkins with Keycloak using OpenID Connect (OIDC). Now let’s go one step further: map
Identity, Security & PKI
Identity, Security & PKI
Identity, Security & PKI
Sync OpenDJ Nested Groups to Keycloak
When integrating OpenDJ with Keycloak, syncing LDAP groups, especially nested groups, as Keycloak groups is essential for centralized, scalable access control across applications. Unlike OpenLDAP, OpenDJ
Identity, Security & PKI
Install OpenDJ on Ubuntu 24.04 with LDAPS via OPNsense HAProxy
Why Switch to OpenDJ OpenLDAP is a reliable and widely used directory server, but it lacks modern features without complex
Identity, Security & PKI
Restrict Keycloak Client Login by Role
By default, Keycloak allows any authenticated user to access any client in a realm. In production, we often want to
Identity, Security & PKI
How to Connect OpenLDAP to Keycloak
If you’re running your own OpenLDAP server and using Keycloak for identity and access management, you can integrate them so
Identity, Security & PKI
How to Sync Employee Data from an HR System to OpenLDAP
In most organizations, your HR system is the source of truth for employee identity data. Meanwhile, OpenLDAP is often used
Identity, Security & PKI
Install OpenLDAP on Ubuntu 24.04 with LDAPS via OPNsense HAProxy
In this guide, you’ll learn how to install and configure OpenLDAP on Ubuntu 24.04, and expose it securely using HAProxy
Identity, Security & PKI
Deploying Step CA: Your Own Certificate Authority for Internal Services
Smallstep step-ca is a CA server for automated certificate issuance in internal environments (homelabs, labs, DevOps workflows). The common model
Identity, Security & PKI
Secure ThingsBoard MQTTS with X.509 Certificate Chain and Auto-Provisioning
This guide builds on: to enable: Why We Removed MQTTS from HAProxy In the earlier setup, HAProxy terminated TLS for
Identity, Security & PKI
How to Use HashiCorp Vault as a Secret Store for Jenkins (via AppRole)
This guide shows how to move an SSH private key from Jenkins-managed credentials into HashiCorp Vault and pull it into