Turn what you know into an opportunity and reach millions around the world.

Your cart is empty.

Advanced OpenID Connect with Keycloak and Spring Security

Name: Advanced OpenID Connect with Keycloak and Spring Security
Rating: 4.7 (467 reviews)

Step-by-Step OAuth, OpenID Connect with Keycloak, GitLab, JWT, Multi Identity Providers, Identity Broker and Spring Boot

Bestseller

Highest Rated

Created byViraj Shetty

Last updated 2/2026

English

What you'll learn

Review of OAuth and OpenID Concepts for Social and Enterprise Applications
Understanding Keycloak as an Identity and Access Management Provider
Step-by-step use of Spring Security with Authorization Code with (and without) PKCE
Step-by-step use of Spring Security with Client Credentials grant
Step-by-step coding of OAuth 2 Clients, JWT and Opaque Resource Servers with Spring Security
Designing Enterprise Authorization using Keycloak Scopes and Roles
Hands On integration with Enterprise Okta SAML Identity Providers with Keycloak
Hands On Identity Brokering using Keycloak with OpenID Connect using GitLab
Handling Multiple Identity Providers in Spring Boot and Spring Security

Course content

10 sections • 98 lectures • 9h 59m total length

Architecture Diagrams3:49
Explore architecture diagrams for OAuth and OpenID Connect, learning how rectangles, data centers, users, and browsers illustrate interactions, security boundaries, and redirect flows with 302 forwarding.
Keycloak Overview6:56
Keycloak Installation and Setup7:41
Postgres Installation and setup4:57
Install and configure Postgres on macOS, connect to a local database, and create a dedicated Keycloak DB to host Keycloak tables, using dbeaver or pgadmin to verify the schema.
Keycloak Postgres Setup7:33
Notes on Keycloak and Postgres setup1:13

Section Introduction1:28
OAuth Actors8:58
Clients and Scopes6:47
Learn how clients and scopes govern access in OAuth and OpenID Connect, using endpoints from the well-known configuration and client registration to obtain tokens for protected resource servers.
Access Tokens and Endpoints6:45
Authorization Code and Refresh Token Grants12:04
Implicit Grant and PKCE7:16
Client Credential and Password Grants3:35
Explore how client credentials grant lets a client obtain an access token for itself to access resources, and why the password grant is deprecated in OAuth 2.1, authorization code flow.
Third Party Versus First Party Application1:12
OpenID Connect6:16
OpenID Connect extends OAuth 2.0 with scopes such as OpenID, profile, and email to authenticate users and access id tokens and user info in apps using Keycloak and Spring Boot.
Enterprise OpenID Connect and Roles5:43
Explore how enterprise apps use OpenID Connect with Keycloak to embed roles in tokens for internal authorization, and verify tokens locally in microservices using authorization code and client credentials grants.
RFC Documentation Links0:37
OAuth and OpenID Connect

Introduction - Project BugTracker4:52
BugTracker Demonstration6:15
BugTracker Keycloak Setup9:04
BugTracker Design4:01
Spring Security - OAuth Authentication7:24
BugTracker Service12:56
BugTracker OpenID Connect Configuration9:45
Spring Security - Authorized Client1:57
BugTracker Controller15:03
BugTracker with Authorization Code Grant10:59
Run the app with Keycloak OpenID configuration, perform the authorization code flow, exchange the code for tokens, validate state and nonce, and map scopes to Spring Security authorities.
BugTracker with PKCE10:43
BugTracker Authorization using Scopes16:07
Documentation links and Downloads for section1:13
Authorization with Scopes
JAUBS - Course Project Explanation16:05
JAUBS - Protecting application using OpenID Connect
Solution for Assignment 118:47

Section Introduction1:29
Keycloak Mapper - Adding Roles claim3:45
BugTracker Authorization using Roles7:54
Note about running BugTracker with Roles0:36
JAUBS - Protecting Application using Roles
Solution for Assignment 26:45
Handling Multiple Identity Providers3:48
Client Registration in GitLab4:44
Spring Security and Multiple Identity Providers8:06
Customizing Authorities5:25
Problems with Multiple Identity Providers4:32
Download final BugTracker ZIP file for section0:32
Spring Security and Multiple Identity Providers
JAUBS - External Identity Providers with Spring Boot

Section Introduction1:19
Creating an OAuth JWT Microservice (Resource Server)10:55
Split the bug tracker into a user interface and a resource server, securing the API with OAuth and OpenID Connect using Keycloak and JWT verification on port 8081.
Spring Security - Resource Server0:42
Calling an OAuth Microservice8:44
Using Introspection Endpoint9:32
Multiple Identity Provider problem4:39
Explore handling multiple identity providers, such as Keycloak and GitLab, and how access tokens, JWTs, and public-key verification affect microservice security.
Enterprise Schedulers and Client Credentials Grant3:12
Client Credentials in Keycloak5:10
BugTracker Scheduler using Client Credentials9:00
Documentation links and Downloads for section0:36
OAuth Microservices
JAUBS - Refactor code by creating a Bookstore REST API

Introduction to Identity Brokers6:46
Identity Broker HTTP Message Flow4:35
Setting up Gitlab Identity Provider in Keycloak4:44
BugTracker Identity Broker Integration7:26
JAUBS - Setup Keycloak as Identity Broker for Google and GitLab
SAML Overview5:26
OpenID Connect and SAML Integration5:12
Enable Keycloak to act as a SAML service provider, integrating with an external SAML IDP through trusted metadata. Map SAML roles to bug tracker access for enterprise users.
BugTracker SAML Usecase3:41
BugTracker SAML Integration with Okta19:11
Creating an Okta Integrator Account0:52
BugTracker Global Logout with Okta12:09
SAML Identity Provider - Assertion Encryption7:33
SAML Identity Provider - Setting User Attributes9:38
Documentation links and Downloads for section0:13
Authentication Identity Brokers
JAUBS - Setup Keycloak as Identity Broker for Okta/SAML Integration

Section Introduction1:35
Cryptography Theory and Practice0:29
URL Encoding2:40
Base64 Encoding2:15
Cryptographic Hashing4:32
Symmetric Encryption3:27
Asymmetric Encryption7:25
Hybrid Encryption4:34
Digital Signatures5:13
openssl - Base64, URL Encoding and Hashing Demonstration10:39
openssl - Symmetric Encryption Demonstration4:56
openssl - Asymmetric Encryption Demonstration8:23
openssl - Hybrid Encryption Demonstration5:38
openssl - Digital Signature Demonstration5:20

Requirements

Basic working knowledge of OAuth
Basic knowledge of Spring Boot

Description

Recent Updates :

All Spring Boot examples tested & updated with Spring Boot 3.5.9, Java 25 & Keycloak 26.5.0

How do we use OAuth and OpenID Connect in real world Enterprise applications? How do we handle multiple OpenID Connect Identity Providers ? How do we use Identity Brokers for integration with SAML and Social Providers like Google, GitLab or Facebook? How do we mix OpenID Connect and OAuth using multiple Providers at the same time ?

This course on OAuth and OpenID Connect builds on my previous course called Enterprise OAuth and OpenID Connect by using Keycloak as the Custom Identity Provider. Students will go through hands-on development using Keycloak, GitLab, Okta and Spring Boot 3.5.x/Spring Security 6.x. Students are expected to have some knowledge of OAuth and Spring Boot.

WHAT THE LEARNERS ARE SAYING:

5 STARS - Viraj has excellent command over subject matter and is also great at teaching complex subject which is evident in this course. As a user of technologies mention in course including Keycloak at my job, I find this content extremely thorough and highly useful. Viraj has covered the topics in depth without making them boring (as one would find by reading RFCs). Congratulations and thanks to Viraj for producing another quality content!!

5 STARS - Viraj is an amazing teacher walking through each step. Its a pleasure to be in his class.

5 STARS - The course is detailed providing technical information. The instructor explains concepts in detail with supporting diagrams. Highly recommend this course for anyone interested in understanding concepts of OAuth and OpenID and step-by-step hands-on instructions.

5 STARS - I like the detailed approach on explaining the basic concepts. Well done.

5 STARS - Great presentation

With the help of theory, plentiful Diagrams and code-centric content, students will learn the following.

Overview of OAuth and OpenID Connect for Enterprise and Social Applications
Protect OpenID Connect Applications using Scopes and Roles
Create OAuth Microservices (Resource Servers) secured with JWT and Opaque tokens
Learn how and when to use Client Credential grant type in Enterprise applications
Learn how to handle Multiple OpenID Connect Identity Providers in Spring Boot
Learn how to use Identity Brokers in Keycloak with Social Identity Providers like Google, GitLab, Facebook etc.
Learn how to use Identity Brokers for OpenID Connect and SAML Integration
Learn how to mix OAuth and OpenID Connect with Multiple Identity providers at the same time
Understand about Cryptographic Hashing, Encryption and Digital Signatures using openssl
Using a Course Project and Assignments, students will get Hands-On practice to implement all that is learnt in the sections.

This course will take you to the next level in your understanding of Authentication and Authorization. Not only do we learn about real life OAuth and OpenID Connect programming but also the architectural Authentication/Authorization blueprints for an enterprise which will guarantee to make you an expert. There is a wealth of Information here; don't miss it.

REMEMBER… I'm so confident that you'll love this course that we're offering a FULL money-back guarantee for 30 days! So it's a complete no-brainer, sign up today with ZERO risk and EVERYTHING to gain.

Who this course is for:

Hands-On Java developers who wants to build Enterprise Security with OAuth 2 and OpenID Connect
Java Developers and Architects who wants to learn Keycloak

Advanced OpenID Connect with Keycloak and Spring Security

What you'll learn

Explore related topics

Course content

Introduction to Keycloak6 lectures • 32min

OAuth and OpenID Connect in a Nutshell11 lectures • 1hr 1min

Keycloak - OAuth Authorization with Scopes15 lectures • 2hr 25min

Keycloak - Roles and Multiple Identity Providers11 lectures • 48min

Keycloak - OAuth and Microservices10 lectures • 54min

Keycloak - Authentication Identity Brokers13 lectures • 1hr 27min

Keycloak - OAuth and OpenID Connect together6 lectures • 25min

Conclusion3 lectures • 3min

Supplementary Section - Cryptography Basics14 lectures • 1hr 7min

Supplementary Section - Other Related Topics9 lectures • 1hr 18min

Requirements

Description

Who this course is for: