I am using two-way TLS communication between Apigee Edge and Backend server (which is exposed using NginxIngress in Kubernetes). However, we want to integrate Apigee Edge with keycloak to secure the endpoint (e.g https://org-name-env.apigee.net/path ). We have users, roles, and realms created on Key…

Keycloak, I believe, can act as an OpenID Connect provider. This means that Keycloak issues client credentials (client ID’s and maybe secrets, or private keys) Keycloak can generate an ID Token (JWT) when a user signs in Maybe you want Apigee Edge to validate the ID Token generated by KeyCloak. …

Need more details. What are you trying to do with KeyCloak? What is the use case? Are you wanting to use it for oauth and OpenID connect? Social Login? or something else? You wrote “to secure the endpoint” but unfortunately that description doesn’t help much. Apigee Edge can secure the endpoint for …

Sorry for the ambiguity. Apigee Proxy Endpoint is pointing to a backend server which is REST API server, so by securing Proxy Endpoint with Keycloak, I mean to secure the REST API using KeyCloak which will be a token-based authentication ( or the best way to authenticate requests coming to the REST …

Got it. Thank you for the clarification. To answer your follow up question, “Is this possible to monitor using Apigee Edge?” Yes! It is possible. Edge has built in monitoring so you could set up Edge as an Authorization server and have it issue tokens. Then, for all requests to your proxies, you co…

Thank you for the answer to the follow-up question. However, we do want to use Keycloak for securing the Apigee Edge Endpoint (which is a proxy for a REST API server) and I am yet to find a well-written documentation/article/post on how to integrate Keycloak with Apigee Edge to secure Proxy Endpoint…

Tagging @Dino-at-Google @Anil Sagar @ Google and @Siddharth Barahalikar for help.

Keycloak is between Client and Edge. @Robert Johnson would you please point me to a direction on how to configure this setup.

Hi @Amit Yadav . Typically customers put a WAF in front of Edge so haven’t seen much about an Auth server in front of Edge. It sounds like clients will be connecting to KeyCloak first and then KeyCloak will call to edge correct? Edge would then call to the backend API servers. So what about client …

Hi @Amit Yadav , I did not work on Keycloak. I would give you a generic answer on how to use external tokens in Apigee. Will the Client pass Keycloack Token in the request to Apigee? If yes, then on Apigee use a Service Callout policy to call the Introspect API of Keycloak to get the incoming token…

Hi @Amit Yadav , I agree to the suggestion given by @Siddharth Barahalikar , and would like to add that in service callout if you are doing proxy chaining, then you will get the missed features in the chained proxy for Keycloak.

Secure Apigee Edge proxy with keycloak?

Google Cloud Apigee

anonymous8 February 24, 2019, 11:07am 6

Ok. Is KeyCloak between client and Edge? Or is KeyCloak between Edge and target (backend server).

Topic		Replies	Views
Is it possible to Integrate KeyCloak with Apigee ? Apigee api-runtime	1	67	July 21, 2017
Can I use external OAuth and still access developer & app aware analytics for monetization? Apigee api-runtime	2	16	July 24, 2017
How I can configure a Proxy API which is targeting an endpoint that requires JWT Token based Authentication Apigee api-runtime	6	54	January 14, 2021

Secure Apigee Edge proxy with keycloak?

AI Suggested topics