This is used for ForNet sso service.
- only remove last name/first name when register
- add production config of
nginx.conf - add bash for easy run to develop theme.
Deny all public access except that really needs for customer. nginx.conf
enable Realm Settings -> Security defenses -> Brute force detection set:
- Max login failures 30 -> 5
- Failure reset time 12 -> 24 Hours
- Permanent lockout off -> on (this may trigger some bad case)
OTP default behaviour of Keycloak with browser login is alternative, it depends on user choice. You can set it required.
MIT