Keycloak is an open-source identity and access management system that provides robust security solutions for applications and services. It acts as a centralized authentication and authorization platform, enabling organizations to secure their resources while offering Single Sign-On (SSO) capabilities. Keycloak is widely used in various industries, including web applications, microservices, and APIs, to protect sensitive data and streamline user access control.

The thesis aims to enhance the security of authentication processes in Keycloak. Traditional static authentication mechanisms, such as username and password, are vulnerable to various security threats, including password breaches, phishing attacks, and unauthorized access. Adaptive authentication might help mitigate these issues.

Adaptive authentication aims to improve the security posture by dynamically adjusting the authentication requirements based on contextual factors. That means the system can adapt its authentication methods and policies in response to changing circumstances.

The structure of the thesis might consist of these points:

1. Service Provider Interface for the adaptive authentication extensibility.
2. Basic implementation in Keycloak.
3. Proof of Concept for a policy engine approach.
4. Proof of Concept for an artificial intelligence approach.
5. Integration with a third-party service.