Integrate EJBCA RA Web Login with Keycloak (OIDC / OAuth2)
This post documents a working setup to log in to EJBCA RA Web using Keycloak as an OpenID Connect (OIDC)
Identity, Security & PKI
Keycloak
Identity, Security & PKI
Why Jenkins Keeps Logging You Out (OIDC + Keycloak): Finding and Fixing the Timeout Layer
When Jenkins is authenticated by Keycloak (OIDC) and sits behind NGINX, “session timeout” is not a single knob. You can
Identity, Security & PKI
Authenticate WordPress to Keycloak with OpenID Connect (OIDC) using a plugin
This post shows how to authenticate WordPress (https://www.maksonlee.com) against Keycloak (https://keycloak.maksonlee.com) using OpenID Connect (OIDC) with a WordPress plugin (no
Identity, Security & PKI
Upgrade Keycloak (Tarball + systemd + MariaDB) on Ubuntu 24.04
Short outage method: Stop → Backup → Upgrade → Start Example upgrade: 26.4.6 → 26.5.2 This post upgrades a Keycloak
Identity, Security & PKI
Enable Step CA SSH Certificates with Keycloak OIDC (Groups → Principals) + Configure Ubuntu Servers to Trust the CA (Ubuntu 24.04 + Windows 11)
This post extends my previous Step CA deployment: Here we add SSH short-lived certificate login using: What you’ll build Users
Identity, Security & PKI
Enable Keycloak SSO (OIDC + PKCE) for Argo CD
This post shows how to enable Keycloak authentication for an existing Argo CD deployment using OIDC + PKCE, so you
DevOps & Software Delivery
Add Jenkins CI/CD to Backstage (With Keycloak SSO, No Docker)
In previous posts, I already have: Now I want Backstage to show Jenkins CI/CD status directly in the CI/CD tab
Identity, Security & PKI
Sync Backstage Users and Groups from LDAP (With Keycloak SSO, No Docker)
In a previous post, I installed Backstage on Ubuntu 24.04, wired it to Keycloak for OIDC login, and ran it
DevOps & Software Delivery
Run Backstage with Keycloak SSO on Ubuntu (Without Docker, Minimal Changes)
The official Backstage docs are excellent and very complete. They also move fast: Docker images, Postgres, Kubernetes, and a lot
Observability & Operations
Zabbix 7.4 + Keycloak (SAML 2.0): End-to-End Setup with JIT Provisioning
This guide connects Zabbix 7.4 at https://zabbix.maksonlee.com to Keycloak at https://keycloak.maksonlee.com (realm maksonlee.com) using SAML 2.0, and enables Just-in-Time (JIT)