#KEYCLOAK

When working in #Keycloak with external #IdentityProviders (no matter if social or not), Keycloak stores by default the authenticated user locally in its database. This might become problematic in terms of data minimization and data privacy control in context of #GDPR or similar data protection laws. Removing stale users automatically from Keycloak is not possible out-of-the box and can become cumbersome.

With the (currently still experimental) feature "#TRANSIENT USERS", it becomes possible to only have the authenticated users in-memory during their session lifetime. Once these user sessions are terminated (either through logout or timeout), all user data is gone, nothing will be stored in Keycloak.

Watch this video to see how it works and what to configure to be able to use it properly!


📖 Chapters:
0:00 - Intro
0:35 - Current default behavior
1:02 - The (experimental) feature "transient users": what it is and what it does
2:02 - Enable the feature on the server level
2:45 - Enable the feature in an IdP
3:13 - Mappers!
4:06 - Demo
5:15 - Transient session & user and lightweight ID
6:48 - Terminated session & transient user is gone
7:18 - Outro

🔗 Links:
📌 Keycloak Discourse Community Forum: https://keycloak.discourse.group/
👉 Public KEYCLOAK TRAININGS in cooperation with socreatory GmbH: https://www.socreatory.com/de/trainin...

Thank you for watching!
Don't forget to subscribe 🔔 to my channel (if not already done) and give this video some thumbs up 👍 (aka "like").
Tell me about your experiences and in the comments. I'm looking forward to it! Thank YOU!

---

I'm Niko - and I'm your Expert for Keycloak IAM & SSO and an independent freelance software consultant, developer and trainer.
I'm here to help - you, your team and your company.
How can I support you? Just get in contact:

🌎 Website: https://www.n-k.de
🔗 LinkedIn:   / dasniko  
🚧 GitHub Profile: https://github.com/dasniko
🦣 Mastodon: https://mastodon.cloud/@dasniko
🎥 YouTube Channel:    / @dasniko  

All things Java, All-End (Frontend, Backend, Fullstack Deployments), Authentication, Security 🔐, IAM, Keycloak, Containers, DevOps, Cloud ☁️, Serverless, On-Premise

Please understand that YouTube Comments are not a good place to get support in case of questions and errors. There are forums and groups out there which are the right place to ask!