Thomas Darimont
Digital Identity Consultant and Managing Director @ Identity Tailor GmbH
Saarbrücken, Germany
Actions
Thomas Darimont is a Digital Identity Consultant and Managing Director at Identity Tailor GmbH. As a long-time contributor to the Keycloak project for almost a decade, Thomas became the first external maintainer outside RedHat in 2022. He is also a member of the OpenID Foundation's Certification team, where he helps to maintain the OpenID Conformance Test Suite. In addition to consulting, Thomas actively contributes to open-source projects within the Keycloak ecosystem. With a background as a software architect and IT consultant, he speaks frequently at conferences on Java, WebAssembly, Web Security, and performance.
Links
Area of Expertise
Topics
Implementing the Phantom Token Pattern with Keycloak
Most Keycloak users rely on enriched access tokens. This approach is efficient but often overexposes information, especially when those tokens are exposed to external parties. The Phantom Token Pattern offers an alternative: combining privacy-preserving opaque-style minimal tokens with backend tokens. This talk introduces the concept, explains how it aligns with Keycloak’s capabilities, and demonstrates how to implement it using lightweight tokens and an API gateway. Discover how to enhance privacy and control in your token architecture without compromising performance.
The leading edge of AuthN and AuthZ by Keycloak
The first part of this talk describes the latest feature of Keycloak: Passkey. We will demonstrate how to use Passkey for secure passwordless authentication. The first part of this talk also describe ongoing working item by Keycloak's community: OAuth 2.1, the next version of OAuth 2.0. We will demonstrate how to use OAuth 2.1 for secure authorizaion of API accesses.
In Europe, interest in De-centralized Identity (DID) and Self-Soverin Identity (SSI) has increased because the European Commission released the European Digital Identity Wallet Architecture and Reference Framework for eIDASv2. To ensure Keycloak is ready for this new identity paradigm, the Keycloak's community is working on supporting features for DID and SSI. The first part of this talk describes this work briefly.
The second part of this talk gives a glimpse of an advanced fine-grained authorization with Keycloak and Open Policy Agent (OPA).
We will also present these work-in-progress topics in a demo.
Thomas Darimont
Digital Identity Consultant and Managing Director @ Identity Tailor GmbH
Saarbrücken, Germany
Links
Actions
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top