#kcwarden — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #kcwarden, aggregated by home.social.
-
We just released a new version of #kcwarden, our #Keycloak configuration auditor that checks for common misconfigurations. Among other changes, we also fixed a false positive regarding the use of unmanaged user attributes. Apologies for any confusion this one might have caused.
You can find the full release notes on our GitHub: https://github.com/iteratec/kcwarden
-
Currently on my way there - if you want to learn about how you can automatically check your #Keycloak configuration for security issues, come to the talk by @twwd and me on our open source tool, #kcwarden. Or hit me up here on Mastodon if you can’t make it 😉.
https://github.com/iteratec/kcwarden
https://fosstodon.org/@ahus1/115100370433696124 -
#KCWarden 0.14.0 released
kcwarden checks your #Keycloak configuration for common misconfigurations and security vulnerabilities.
-
Looking forward to being at #KeyConf25 and meeting all the interesting people there! My colleague Tim and I will be presenting our #Keycloak config auditor tool, #kcwarden, that helps you keep your server configuration secure. https://github.com/iteratec/kcwarden
https://fosstodon.org/@ahus1/114753988086598591 -
Long shot, but: As my project for #eh22 I was thinking about extending our #Keycloak configuration auditor with some checks for #SAML-based authentication. However, I know next to nothing about SAML and am a bit lost, to be honest. If anyone is at #eh22 who has some knowledge about SAML security and common misconfigurations (on the server or client side), and wants to collaborate to create some checks for #kcwarden (https://github.com/iteratec/kcwarden), hit me up.
-
I am delighted to share that @twwd and I will be speakers at @elbsides in #Hamburg! We will present our joint work, "Protectors of the Realm: Breaking and Fixing #Keycloak Configurations", in which we draw from our experience in multiple projects to share how we approach auditing a Keycloak installation for configuration issues that impact its #Security. We will also be releasing #kcwarden, our automated Keycloak config auditor tool, as #OpenSource software at the event. Come join us!