SPNEGO Chopper Authenticator for Keycloak

Build

mvn package

docker run --rm -it -p 8080:8080 -v ./target:/opt/keycloak/providers \
        -e KC_BOOTSTRAP_ADMIN_USERNAME=admin -e KC_BOOTSTRAP_ADMIN_PASSWORD=admin \
        quay.io/keycloak/keycloak:latest \
        start-dev

Install

1. Create a copy (Duplicate) of the Browser flow.
2. Remove the original Kerberos action.
3. Add the Kerberos Chopper step.
4. Configure it (gear icon); adjust the number of bytes to chop off.
5. Under the Advanced tab in the client's configuration, change Browser Flow to the new flow under the Authentication flow overrides.
6. Voila.

Author

Lars Wilhelmsen

License

MIT