Securing Token Endpoint by Client IPs

Hi Experts,

On KC token endpoint (/auth/realms/xxx/protocol/openid-connect/token), how do I apply IP whitelist for the client that are allow to access it?

Dixon

Hi, this is not possible out of the box with Keycloak, but take a look at Limit login of a specific users from whitelist IP address for a look into how you could write a SPI to do that.