Keycloak architecture: one login service in front of many applications

Scroll or pinch to zoom, drag to move, double-click to zoom in 100% SVG PNG Back to the post

Keycloak architecture: a user opens an application, which redirects the browser to Keycloak to sign in; the application then asks Keycloak for tokens; Keycloak stores users and realm configuration in PostgreSQL, keeps sessions in an Infinispan cache shared across its nodes, can delegate login to an LDAP directory or an external identity provider, and is run on Kubernetes by the Keycloak Operator.