Evolving OpenID Connect and Observability in Keycloak
Talkat KubeCon + CloudNativeCon Europe 2025 · on Friday, 2025-04-04· at 14:30· Level 3 | ICC Capital Suite 7-9·
summary
Keycloak adds experimental support for RFC 9449 PoP to make stolen access tokens useless and experimental OID4VCI for wallet-based verifiable credentials; tracing lands as preview in 26.0 and supported in 26.1 with dashboards shipping in 26.2. Documentation includes a 95% <250ms SLO example and a metrics catalog; Grafana dashboards, Prometheus, OpenTelemetry traces and exemplars linked to Jaeger are used in a demo that injects a 100 ms Postgres delay via Chaos Mesh and shows SLO drops to ~56% while traces point to database latency.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 1:10Keycloak security updates
- 8:49Future security specs
- 12:34Observability updates
- 12:54Observability enhancements
- 13:36Service Level Indicators guide
- 15:05Metrics and dashboards
- 17:31Tracing and logging improvements
- 18:13Live demo setup
- 19:16Service Level Objectives monitoring
- 20:18Troubleshooting dashboard
- 22:47Trace exemplars analysis
- 25:56Root cause analysis
- 26:53Closing remarks
related talks
31mDelegate Authentication and a Lot More To Keycloak With OpenID...
01h 03mSingle Sign On with Keycloak: why and how
26mKeycloak Introduction and Demo
48mIntroduction au framework OpenID Shared Signals
07mWelcome + Opening Remarks
36mSecuring Agentic Platforms with Zero-Trust Workload Identities
53mOAuth2/OIDC security weaknesses and pitfalls
12mWhat Is New and Coming for Managing Cloud Native Identities in…