Want to integrate KeyCloak as an external IDP for the developer portal

Question

Want to integrate KeyCloak as an external IDP for the developer portal

Biplab Bose 1

We want to authenticate users based on keycloak instead of Azure AD to login to the Azure Developer Portal, as our client already has been using keycloak. Please let us know the correct documentation or the steps to do it . Please let us know, if delegation would work out for the same (If so, how) ?

1 answer

Your answer

Answer 1

MuthuKumaranMurugaachari-MSFT 22,441 Moderator

@Biplab Bose Thank you for reaching out to Microsoft Q&A. To authenticate in developer portal, you can use Azure AD B2Cother than Azure AD.

For AD B2C, refer docs: How to authorize developer accounts by using Azure Active Directory B2C in Azure API Management which has detailed steps to configure user flow and identity provider. Please note, you would need to set up AD B2C tenant (the steps to create as described here) and add KeyCloak as Generic OpenID Connect. Similar question Setup login to Developer Portal with IdentityServer has been answered in api-management-developer-portal GitHub page by our product team.

Alternatively, Delegation enables you to handle developer sign-in/sign-up process using your existing website instead of built-in functionality. Check out How to delegate user registration and product subscription for more info on this.

Tagging Azure AD experts if you have any other follow up questions on AD B2C. I hope this answers your question and feel free to add a comment if you have any other questions. We would be happy to assist you.

Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community.

Soumitra Mishra 6 Reputation points

2022-10-31T06:19:03.847+00:00

Dear @MuthuKumaranMurugaachari-MSFT ,

Thank You for your response, we do not want to utilise AD B2C.
Delegation will be an ideal scenario for us but the redirect from my KeyCloak delegation endpoint is reaching developer portal with the token. However the developer portal redirects back to Keycloak endpoint causing infinite redirect loop.
MuthuKumaranMurugaachari-MSFT 22,441 Reputation points Moderator

2022-10-31T14:25:50.803+00:00

@Soumitra Mishra Sorry that's not an expected behavior. I assume, you followed step 5 mentioned in docs: https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-setup-delegation#create-your-delegation-endpoint in KeyCloak endpoint and this is causing infinite loop.

We would require additional details to analyze this issue and will reach out separately. Also, you can share the detailed steps in api-management-developer-portal repo and this way, we can tag our product team directly in the repo for further investigation.

Share via

Want to integrate KeyCloak as an external IDP for the developer portal

1 answer

Your answer