Authsignal Key Cloak Authenticator - Enable MFA and Passkeys for Keycloak

Authenticator for Keycloak that uses Authsignal's Pre-built UI to challenge the user for MFA/Passwordless/Passkeys as part of a Keycloak login flow.

This has been tested against Keycloak 26+ (Quarkus) and Java 18+.

How to use

Install the authenticator extension

1. Build or download the pre-built "authsignal-keycloak-*.jar" JAR file.
2. Download the Authsignal (version 2.0+) Java SDK (dependency) JAR file from maven
3. Copy the above two JAR files to your keycloak server /providers/ directory

Configure the authenticator

Please view our official Keycloak configuration documentation

Building on your computer

You can build and package this project using Gradle. The Gradle build command will compile the source code and generate the JAR files.

./gradlew build

You will need to use the output JAR app/build/libs/authsignal-keycloak-*.jar and copy it to your Keycloak server's /providers directory.