Liferay Keycloak integration - SSO and SLO implementation
Liferay Keycloak - Single Sign On / Single Logout Overview Previous article ( https://lifedev-solutions.blogspot.com/2019/10/liferay-keycloak-integration-using.html ) describes steps to configure Keycloak SSO Authorization in Liferay using OpenID Connect Provider. However, this approach has several limitations: - it can't be used as a default login mechanism: user needs to click "Sign In", chose "OpenId Connect", select "OpenId Connect Provider", and only then he is redirected to the Keycloak sign-in form; - After logging out from Liferay user stays logged in in Keycloak. This article will show how to overcome these issues. SSO with Servlet Filter For automatic redirection to Keycloak's Sign In form the servlet filter may be implemented: @Component ( immediate = true , property = { "servlet-context-name=" , "servlet-filter-name=Keycloak Login Filter" , ...