Analiza sustava za upravljanje identitetima i pristupom Keycloak

professional thesis

• Title (english): Analysis of Keycloak identity and access management system
• Author: Alen Adanić
• Mentor: Stjepan Groš (mentor)
• Committee member: Miljenko Mikuc (predsjednik povjerenstva)
• Committee member: Stjepan Groš (član povjerenstva)
• Committee member: Krešimir Grgić (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; (Department of Electronics, Microelectronics, Computer and Intelligent Systems); Zagreb
• Defense date and country: 2023-02-23, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Ovaj je rad za glavni cilj imao analizu i utvrđivanje slijednosti dnevničkih zapisa Keycloak sustava za upravljanje identitetima i pristupom i aplikacije integrirane preko OpenID Connect protokola. U svrhu tog cilja analizirane su i opisane glavne funkcionalnosti svih sustava za upravljanje identitetima, a nakon toga opisan je i sam Keycloak. Kod Keycloak sustava opisane su njegove funkcionalnosti kroz administrativnu konzolu, konzolu za upravljanje korisničkim računom i integracije. U nastavku navedenog izrađena je aplikacija s bibliotekom za bilježenje koja se integrirala na Keycloak sustav. Uz pomoć aplikacije i Keycloak sustava izvedeni su tokovi autentifikacije i autorizacije OpenID Connect protokola, prikupljeni su njihovi dnevnički zapisi i metodama izvlačenja i pretvaranja podataka zapisani u zajedničku tablicu. Posljedično, u tablici se utvrđivala slijednost dnevničkih zapisa u odabranim slučajevima. Nakon analize predloženi su ostali standardi koji se mogu analizirati u Keycloak sustavu te su predloženi sustavi za prikupljanje i analizu dnevničkih zapisa koji bi optimizirali cijeli proces analize.

Abstract (english)

The main goal of this paper was to analyze and determine the consistency of the log entries of the Keycloak identity and access management system and integrated applications via the OpenID Connect protocol. The main functionalities of all identity management systems were analyzed and described, and then Keycloak itself was described. Keycloak system, and its functionalities are described through the administrative console, the user account management console and integrations. After that, an application was created with a logging library that was integrated into the Keycloak system. With the help of the application and the Keycloak system, the authentication and authorization flows of the OpenID Connect protocol were performed, their log entries were collected and written into a common SQL table using data extraction and transformation methods. The consistency of the log entries in all cases could then be confirmed. After the analysis, other standards that can be analyzed in the Keycloak system were proposed. Also, systems that can collect and analyze log entries were proposed so that the entire process can be optimized.

• Keywords: Keycloak; bilježenje; dnevnički zapis; OpenID Connect
• Keywords (english): Keycloak; logging; log entry; OpenID Connect
• Language: croatian
• URN:NBN: urn:nbn:hr:168:489151
• Study programme: Title: Specialist study programme in information security; Study programme type: university; Study level: postgraduate specialist; Academic / professional title: Specijalist informacijske sigurnosti (Specijalist informacijske sigurnosti)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Access restricted to students and staff of home institution
• Created on: 2023-04-11 12:36:09