KeycloakCon Japan 2025: Full Schedule

13 June
Learn More and Register to Attend

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for KeycloakCon Japan 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in Japan Standard Time (UTC+9:00). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date." The schedule is subject to change and session seating is available on a first-come, first-served basis.

15:45 JST

Standardizing Authentication Flows in Keycloak Environments – Efficient Authorization Strategies Using OPA - Yuta Kato, CyberAgent, Inc.

Friday June 13, 2025 15:45 - 15:50 JST

Level 1 | Apollon

In this session, we will explain how we standardized and streamlined authentication flows to address the growing workload faced by engineers due to the rapid increase in authentication services.

To tackle the challenging task of building individual authentication flows for over 100 services, we adopted an implementation approach that defines authorization levels using role information and leverages attribute data stored in Keycloak.

By accurately linking user information with imported role data and standardizing authentication flows, we enabled faster updates to authorization systems. Additionally, we implemented centralized policy management for each client using OPA (Open Policy Agent) and policy language, significantly improving maintenance efficiency.

This session will provide practical and scalable design strategies and implementation methods for building robust systems that address au

Speakers

Yuta Kato

Software Engineer, CyberAgent, Inc.

Yuta Kato is a Software Engineer at CyberAgent, Inc. He previously built data infrastructure and machine learning workflows for ABEMA. Currently, he is part of the Group IT Promotion Division, where he manages identity systems for the entire CyberAgent Group and develops Keycloak... Read More →

Friday June 13, 2025 15:45 - 15:50 JST
Level 1 | Apollon

Breakout Sessions

Content Experience Level Introductory and overview
Presentation Language Japanese

15:55 JST

How To Manage Keycloak Securely by Using Terraform on Google Cloud - Atsushi Kitano, Cloud Ace

Friday June 13, 2025 15:55 - 16:05 JST

Level 1 | Apollon

We have launched a new service which monitors customers' systems.
It uses Keycloak to authenticate for customers and developers to use our service components, for instance, Grafana, ArgoCD, Backstage, Redmine, and so on.

So, Keycloak has personal information, and we have to manage it securely.
We're using Terraform to configure Keycloak, not for making mistakes due to creating by hand. And we don't want to encounter errors when running Terraform code from the developer's PC.
So we're running it from the CD agent. We use Cloud Build, a Google Cloud product, because it provides a private pool that allows us to use a specific IP address.

We'll introduce how to build this CD system and how to use Terraform in my session.

Speakers

Atsushi Kitano

DevSecOps Division Expert, Cloud Ace

After researching automation technology related to IT system development and construction at a major SI company, he was engaged in the construction and operation management of private cloud infrastructure used throughout the company at division. After that, he worked on the development... Read More →

Friday June 13, 2025 15:55 - 16:05 JST
Level 1 | Apollon

Breakout Sessions

Content Experience Level Introductory and overview
Presentation Language Japanese

16:50 JST

OpenID Federation Trust Chain on Keycloak for Highly Assured Use Cases of Digital Identity Wallet - Yutaka Obuchi, Hitachi

Friday June 13, 2025 16:50 - 17:05 JST

Level 1 | Apollon

OpenID Federation 1.0 provides a framework to build trust between a Relying Party and an OpenID Provider that have no direct relationship so that the Relying Party can send OIDC/OAuth requests to the OpenID Provider without being previously registered.

One primary use case is the trust between an Issuer and a Holder (Wallet) on W3C’s Verifiable Credential Data Model, which is getting a lot of attentions as an approach to realize the Digital Identity Wallet ecosystem.
Especially when high assurance level is needed like EU Digital Identity Wallet, OpenID Federation can provide a strong solution.

In this session:
Firstly I will explain OpenID Federation and the reason why it is important for Digital Identity Wallet ecosystem.
Then I will explain what types of roles Keycloak can play with OpenID Federation Trust Chain.
Also I will show a simple demo of client registration with OpenID Federation Trust Chain on Keycloak.

Speakers

Yutaka Obuchi

Software Engineer, Hitachi

Software Engineer at Hitachi, Ltd, Digital Identity enthusiast, Keycloak(IAM OSS) contributor My recent activity related to the topic proposed for this session: https://bucchi.medium.com/building-trust-with-openid-federation-trust-chain-on-keycloak-f8ac021add3a My linkedin profile... Read More →

Friday June 13, 2025 16:50 - 17:05 JST
Level 1 | Apollon

Breakout Sessions

Content Experience Level Intermediate
Presentation Language Japanese