Best Approach for Integrating Keycloak with ERP System for IAM and SSO in Microservices Architecture

Getting advice
, , ,
2
  1. Follows the identity standards. OIDC :point_right: AuthN and OAuth 2.0 :point_right: AuthZ (more accurately, access delegation)
  2. It’s all about your “P*P” architectures (PIP, PDP, PEP, etc.)
  3. SPA or Native Apps :point_right: Authorization Code Flow with PKCE
  4. Depends on your point 2). It’s not mandatory, but it’s common.Nevertheless, Spring Boot comes Spring Security’s OAuth 2.0 . Here’s a reference for other approach [1]
  5. Review OIDC [2], OAuth 2.0 [3]
    [1] Mastering Access Control: Low-Code Authorization with ReBAC, Decoupling Patterns and Policy as Code | by Martin Besozzi | Medium
    [2] Final: OpenID Connect Core 1.0 incorporating errata set 2
    [3] RFC 6749 - The OAuth 2.0 Authorization Framework