Django + Keycloak Best Practice
There are few online resources that elaborate how Django user use Keycloak.
I wish to hear from the Django community experience
How I do it
I setup my own Keycloak instance, and use it via Django allauth (GitHub - pennersr/django-allauth: Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication.) package.
Allauth make this a very smooth experience, worked right out of the box.
My concern is how should we use Keycloak client scopes, realm roles and groups? Are there any specific attributes I should assign for Django openid connect client?
I watched Keycloak videos, but they are tutorials and I want something more “Production” realistic.
How do you do it for your SSO even if you are not using Keycloak?