Keycloak Radius Hotspot

Setup social and other Oauth/Saml integration with Keycloak Radius embedded server

How Keycloak Radius Hotspot works

1. Authorization through Keycloak occurs by OpenID Connect.
2. User selects on the login page the identity provider through which he wants to log in
3. The result of a successful authorization is a JWT that contains a temporary session key.
4. With this key, the User is authorized through Radius Server.
5. Radius Server checks if this key is in the user session. And whether it was used.
6. Radius Server successfully authorizing the user

connection Schema`s

- Cloud connection (Better to Use Radsec)

- Proxy connection

Setup, build and configure HotSpot page for Social Login

1. Create Realm
2. create Radius Client
3. create OpenId client
4. Setting your Hotspot DNS in "Valid Redirect URIs" and "Web Origins"
5. add "Radius Session Password" Mapper
6. Download keycloak.json

Setup Mikrotik

1. Upload all files from hotspot/mikrotik to flash/hotspot on device (authorization.js and login.html)

• Using web UI
• Using scp
• Using ftp
• Using winbox

2. Download keycloak.json
3. upload keycloak.json into flash/hotspot on device
4. update Walled Garden. Add your keycloak host

Facebook Login example

1. Install Keycloak with embedded Radius Server
2. install ngrok. Register ngrok

   ./ngrok authtoken <YOUR TOKEN>

3. start ngrok

   ./ngrok http 8090

   
4. open keycloak goto realm and add Facebook Identity Provider
5. Copy Redirect URI
6. goto https://developers.facebook.com/ and create a new application
7. Insert Redirect URI from Step 7
8. Get App Id and Secret from application (Settings->basic)
9. back to Keycloak and set this App Id and Secret
10. add facebook hosts to Walled Garden

/ip hotspot walled-garden  
add comment=facebook dst-host=facebook.*  
add comment=facebook dst-host=*.facebook.*  
add comment=facebook dst-host=*.fbcdn.*  
add comment=facebook dst-host=*akamai*  
add comment=facebook dst-host=*atdmt*
add comment=facebook dst-host=*fbsbx*
add comment=common dst-host=www.google-analytics.com

12. open hotspot page

build UI

build UI Requirements:

node and npm must be installed
macbook instalation brew : brew install node
Install node on ubuntu

Building steps

1. cd ./source
2. npm i
3. npm run build
   result in ./mikrotik