Class 9: Access on NGINX+ - Authentication for Web Access

Note

Last Updated: 05/27/2022

Instructors at Agility 2022:

• David Clark <d.clark@f5.com>
• Matt Harmon <M.Harmon@f5.com>
• Jeffrey Welton <j.welton@f5.com>

UDF Lab Maintainers:

• David Clark <d.clark@f5.com>

This lab will show how to enable single sign-on (SSO) for applications being proxied by NGINX Plus. The solution uses OpenID Connect as the authentication mechanism, with Keycloak as the identity provider (IdP), and NGINX Plus as the relying party.

Expected time to complete: 1 hour

• Introduction
  • Lab Topology
  • Lab Components
  • Lab Setup
  • High Level View of auth flow for the lab Environment
• Let’s Get Started - Join UDF Course
• Installing Prerequisites:
  • Install Nginx+ njs module
  • Create a clone of the nginx-openid-connect GitHub repository
• Configuring the IdP Keycloak:
  • Create a Keycloak client for NGINX Plus in the Keycloak GUI:
  • Creating a user in keycloak
• Configure NGINX Plus as the OpenID Connect relying party
• Testing the config

Important

• The Lab MC will provide the necessary details to connect to lab environment.
• All work for this lab will be performed exclusively from the UDF Webshell and Firefox Container.
• No installation or interaction with your local system is required.

Attention

• For anyone wishing to take this lab at a later date, the lab is hosted on the F5 UDF Environment, and is called “UA Nginx Class 9 Agility 2022”. Please work with your F5 Account Team for access.