💂Email domain acceptlist

Only allow specific emails to register.

Can't register with a @gmail.com address

With user profile

Using user profile capabilities of keycloak you can define a Regexp on the email field that will only allow certain domains to register.

The Regexp should look something like this and can be generated easily with this helper.

You can find here the source code that allow to convert the regexp back into an array of string to display a tooltip that show what emails are allowed like shown on the video above.

With a third party Keycloak plugin

The legacy way of doing it would be with this plugin and usingkcContext["authorizedMailDomains"] to validate in realtime.

Relevant code here and here.

Cloud IAM - Keycloak Identity and Access Management as a Service

Feeling overwhelmed? Check out our exclusive sponsor's Cloud-IAM consulting services to simplify your experience.