Identity is a core part of operating a platform. In this article I want to explore one of the ways you can authenticate users to OpenShift, using X.509 certificates and Keycloak.
Phishing-resistant multi-factor authentication is a critical security control in 2024, and this article takes you through configuring it for OpenShift with Keycloak
Keycloak can support some interesting authentication and authorisation flows, one of which is creating users and assigning roles ahead of upstream identity provider authentication.