Jump to content

Planning/Keycloak Administrator mTLS

From Internal Dandelion and stuff Wiki

For more secure authentication for administrators, mTLS will provide a more secure mechanism to prevent bad actors from trying to bruteforce the already mandatory password policies.

  1. Be our own certificate authority
  2. Sign the administrator's certificate.
  3. Profit