Custom Authenticator for OpenID Keycloak realm
<p>I am currently evaluating <a href="http://www.keycloak.org/" rel="nofollow">keycloak</a> as central Identity Manager for multiple  a backend with multiple REST services (Resteasy/Wildfly).</p>

<p>After a lot of trial and error and reading the docu, I have succeeded in succesfully making an openid connect login into my custom keycloakrealm (analogue to this post <a href="http://blog.keycloak.org/2015/10/getting-started-with-keycloak-securing.html" rel="nofollow">http://blog.keycloak.org/2015/10/getting-started-with-keycloak-securing.html</a>)</p>

<p>I can see the acces token + id_token coming in the response and are able to make requests to the REST services by passing these tokes.</p>

<p>However I can only authenticate using the credentials of the users defined in keycloak itself. However, in our reallife case, the users reside in SAP and are unknown to keycloak.</p>

<p>We do, however have a  javalibrary for authenticating these users over the SAPJCO connector.</p>

<p>Can anyone please tell me how to configure keycloak to use a "custom authentication" module for the actual authentication? </p>

<p>Is implementing a custom authenticator SPI (<a href="https://keycloak.gitbooks.io/server-developer-guide/content/v/2.1/topics/auth-spi.html" rel="nofollow">https://keycloak.gitbooks.io/server-developer-guide/content/v/2.1/topics/auth-spi.html</a>) the way to go? If not, what wuold be a possible solution???</p>

<p>Hope you guys can help!</p>

<p>Reagrds,</p>

<p>Kim Zeevaarders
The Netherlands</p>