Jitsi Keycloak Adapter v2

• 1. Features
• 2. Setup
• 3. Keycloak configuration
• 4. Similar projects
• 5. Sponsors

Allow Jitsi to use Keycloak as an identity and OIDC provider.

This is the second generation of jitsi-keycloak-adapter designed for better integration with Jitsi's built-in features such as tokenAuthUrl, muc_wait_for_host, etc.

See jitsi-keycloak-adapter-v1 for the initial design which is still actively maintained.

See jitsi-oidc-adapter for a general-purpose OIDC adapter. It also supports Keycloak.
PLEASE SWITCH TO THIS VERSION TO GET NEW FEATURES.

1. Features

• SSO for Jitsi through Keycloak. Allows Jitsi to run as an OIDC consumer.
• Better integration with Jitsi's built-in features for authentication flow.
• Allows guest users and wait for host screen if needed.

2. Setup

See standalone setup guide to install it on a standalone Jitsi server.

See Docker setup guide to integrate it with a Dockerized Jitsi setup.

3. Keycloak configuration

Create client inside realm.

• Set client id
• Add Jitsi's token page URL to Valid redirect URIs
  e.g. https://jitsi.mydomain.com/oidc/tokenize
• Add Jitsi's origin to Web origins
  e.g. https://jitsi.mydomain.com or just use +
• Set Access type

  • For Keycloak versions < 20.x, set Access type to public:

    

  • For Keycloak versions >= 20.x, disable Client authentication:

    

• Alternatively, set Access type to confidential (respectively, leave Client authentication enabled) and set the KEYCLOAK_CLIENT_SECRET environment variable to the client secret generated by Keycloak.

4. Similar projects

• jitsi-oidc-adapter
• jitsi-keycloak-adapter-v1
• jitsi-keycloak
• Jitsi-SAML2JWT
• jitsi-OIDC-adapter
• Jitsi Go OpenID

5. Sponsors