# Any security concerns between version Keycloak 12.0.0 and Keycloak 10.0.0?

**URL:** <https://forum.keycloak.org/t/any-security-concerns-between-version-keycloak-12-0-0-and-keycloak-10-0-0/7197>\
**Category:** Getting advice\
**Created:** [February 5, 2021, 6:30am UTC](https://forum.keycloak.org/t/any-security-concerns-between-version-keycloak-12-0-0-and-keycloak-10-0-0/7197 "2021-02-05T06:30:47Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![khew81](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/khew81/32/2297_2.png) [@khew81](https://forum.keycloak.org/u/khew81)\
**Post date:** [February 5, 2021, 6:30am UTC](https://forum.keycloak.org/t/any-security-concerns-between-version-keycloak-12-0-0-and-keycloak-10-0-0/7197/1 "2021-02-05T06:30:47Z")

</div>

Due to my project is .Net Framework 4.6 WebForm architecture, I am quite sure it is not able to support Keycloak 12.0.0 directly so I am trying to use an older version of Keycloak.

---

<div class="post-metadata">

**Author:** ![khew81](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/khew81/32/2297_2.png) [@khew81](https://forum.keycloak.org/u/khew81)\
**Post date:** [February 15, 2021, 5:06am UTC](https://forum.keycloak.org/t/any-security-concerns-between-version-keycloak-12-0-0-and-keycloak-10-0-0/7197/2 "2021-02-15T05:06:04Z")

</div>

_bump_ so that this post gets some attentions

---

<div class="post-metadata">

**Author:** ![xgp](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/xgp/32/2589_2.png) [@xgp](https://forum.keycloak.org/u/xgp)\
**Post date:** [February 15, 2021, 2:48pm UTC](https://forum.keycloak.org/t/any-security-concerns-between-version-keycloak-12-0-0-and-keycloak-10-0-0/7197/3 "2021-02-15T14:48:40Z")

</div>

Why is your application unable to support 12.0.x? It is not recommended to use older versions, as there are CVEs that get fixed in the current version.

---

<div class="post-metadata">

**Author:** ![khew81](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/khew81/32/2297_2.png) [@khew81](https://forum.keycloak.org/u/khew81)\
**Post date:** [February 15, 2021, 3:00pm UTC](https://forum.keycloak.org/t/any-security-concerns-between-version-keycloak-12-0-0-and-keycloak-10-0-0/7197/4 "2021-02-15T15:00:29Z")

</div>

Hi @xgp , because there is limited support for .NET Web Form and that is the reason. Do you have any solution?

---

<div class="post-metadata">

**Author:** ![xgp](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/xgp/32/2589_2.png) [@xgp](https://forum.keycloak.org/u/xgp)\
**Post date:** [February 15, 2021, 3:14pm UTC](https://forum.keycloak.org/t/any-security-concerns-between-version-keycloak-12-0-0-and-keycloak-10-0-0/7197/5 "2021-02-15T15:14:32Z")

</div>

[ASP.NET](http://ASP.NET) Web Forms applications can be secured via OpenId Connect. I can’t see any reason why this wouldn’t be compatible with Keycloak 12.0.x. If you can provide more context about your project, or any sample code, we might be able to help you here.

---

<div class="post-metadata">

**Author:** ![khew81](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/khew81/32/2297_2.png) [@khew81](https://forum.keycloak.org/u/khew81)\
**Post date:** [February 15, 2021, 10:17pm UTC](https://forum.keycloak.org/t/any-security-concerns-between-version-keycloak-12-0-0-and-keycloak-10-0-0/7197/6 "2021-02-15T22:17:42Z")

</div>

But I can’t find a working .NET KeyCloak adapter for myself, not sure do you know any which is still working fine with the latest KeyCloak version?

---

<div class="post-metadata">

**Author:** ![jangaraj](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/jangaraj/32/5175_2.png) [@jangaraj](https://forum.keycloak.org/u/jangaraj)\
**Post date:** [February 16, 2021, 7:02am UTC](https://forum.keycloak.org/t/any-security-concerns-between-version-keycloak-12-0-0-and-keycloak-10-0-0/7197/7 "2021-02-16T07:02:14Z")

</div>

Xgp is saying that you don’t need any library which has keycloak in the name, but only library with open id connect standard support .

---

<div class="post-metadata">

**Author:** ![khew81](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/khew81/32/2297_2.png) [@khew81](https://forum.keycloak.org/u/khew81)\
**Post date:** [February 16, 2021, 7:17am UTC](https://forum.keycloak.org/t/any-security-concerns-between-version-keycloak-12-0-0-and-keycloak-10-0-0/7197/8 "2021-02-16T07:17:41Z")

</div>

Is that what he meant? The reason that I want to use KeyCloak because I want to achieve single sign-on. I have 2 different applications and the same user table in the system and if the user signed-in into one of the applications it should be allowed to access the other.

Can Open Id achieve this? If you don’t mind please explain more to me or provide me some reference links, thanks.

---

<div class="post-metadata">

**Author:** ![jangaraj](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/jangaraj/32/5175_2.png) [@jangaraj](https://forum.keycloak.org/u/jangaraj)\
**Post date:** [February 16, 2021, 3:52pm UTC](https://forum.keycloak.org/t/any-security-concerns-between-version-keycloak-12-0-0-and-keycloak-10-0-0/7197/9 "2021-02-16T15:52:28Z")

</div>

Single sign-on (SSO) is achieved by SSO protocol e.g. Open ID Connect (OIDC). So you can have SSO with any Identity Provider (IDP) which support OIDC protocol.

You have selected Keycloak to use as IDP, but that’s not stopping you to use any OIDC library, which should work with Keycloak as well. [Libraries, Products, and Tools | OpenID](https://openid.net/developers/libraries/) is good starting point.

---

<div class="post-metadata">

**Author:** ![xgp](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/xgp/32/2589_2.png) [@xgp](https://forum.keycloak.org/u/xgp)\
**Post date:** [February 16, 2021, 5:58pm UTC](https://forum.keycloak.org/t/any-security-concerns-between-version-keycloak-12-0-0-and-keycloak-10-0-0/7197/10 "2021-02-16T17:58:18Z")

</div>

Here’s a good tutorial on adding OpenID Connect authentication to an [ASP.NET](http://ASP.NET) application:

> **[Tutorial: Register an application with the Microsoft identity platform -...](https://learn.microsoft.com/en-us/azure/active-directory/develop/web-app-tutorial-01-register-application)**
>
> In this tutorial, you learn how to register a web application with the Microsoft identity platform.

Just replace “Microsoft Identity Platform” with “Keycloak”.
