Keycloak + OWasp ASVS

Securing applications
1

Hi,
I 'm currently evaluating our application against OWasp ASVS Level 1 (GitHub - OWASP/ASVS: Application Security Verification Standard).
So I have to verify requirements for keycloak.
My Question is: Was it already done and you can give me a hint where I can find it
or should I try it to do it and post it here for a review ?
Or is there something like that already.

At the end there would be a document which would help anybody to see what keycloak does for ASVS and what is in control of applications which use keycloak as IAM.

Best regards
Lars

1 Like
2

@Lars.Kuehl , were you able to get this done?

3

Is there the possibility to have this document for Keycloak?

4

I would also be interested to see the document mentioned if it has been created.
brg,
Thor