KEYCLOAK Step-Up Authentication explained | Niko Köbler (@dasniko)

Have you ever heard of step-up authentication, "authentication context class reference" aka "acr" value and "level of authentication"? No, well, then this video is for you! I'll explain in detail what step-up #authentication is and how it works and how you get it configured with #Keycloak. Additionally you will learn about the terms "acr values" and "level of authentication" and what it means. Watch the whole video! 📖 Chapters: 0:00 - Intro 0:40 - Step-Up UseCases explained 3:03 - Configuring Keycloak Realm - ACR-to-LoA Mapping 4:06 - Configuring the Authentication Flow 7:12 - Demo with Client 10:25 - Code Example for SPA 13:11 - Recap 🔗 Links: 📌 Step-Up Code-Example in React.JS Demo: https://github.com/dasniko/keycloak-bookshop-demo/blob/main/checkout-react/src/StepUp.jsx 📌 ACR-Claim in OIDC-Spec: https://openid.net/specs/openid-connect-core-1_0.html#acrSemantics 📌 Keycloak Docs: ACR-to-LoA Mapping: https://www.keycloak.org/docs/latest/server_admin/index.html#_mapping-acr-to-loa-realm 📌 Keycloak Docs: Step-Up Authentication Flow: https://www.keycloak.org/docs/latest/server_admin/index.html#_step-up-flow Thank you for watching! Don't forget to subscribe 🔔 to my channel (if not already done) and give this video some thumbs up 👍 (aka "like"). Tell me about your experiences and in the comments. I'm looking forward to it! Thank YOU! --- I'm Niko - and I'm a Keycloak Expert and an independent freelance software consultant, developer and trainer. I'm here to help - you, your team and your company. How can I support you? Just get in contact: 🌎 Website: https://www.n-k.de 🚧 GitHub Profile: https://github.com/dasniko 𝕏 X (formerly Twitter): https://twitter.com/dasniko 🦣 Mastodon: https://mastodon.cloud/@dasniko 🎥 YouTube Channel: https://www.youtube.com/@dasniko?sub_confirmation=1 All things Java, JavaScript, All-End (Frontend, Backend, Fullstack Deployments), Authentication, Security 🔐, IAM, Keycloak, Containers, DevOps, Cloud ☁️, Serverless, On-Premise Please understand that YouTube Comments are not a good place to get support in case of questions and errors. There are forums and groups out there which are the right place to ask!