Keycloak authorization integration support with OPA (Open Policy Agent)

Securing applications
1

Hello All,

Hope you are doing great !!!

I am currently working on OPA integration with Keycloak. I have the OPA server and policies are defined. I wants to connect the OPA server from Keycloak for Authorization.

Does Keycloak is having support for it? If so please share some articles.

@dasniko could you please provide some advice.

Kindly assist on this.

Thanks in Advance.

2

Hi @periyasamy.
Iā€™m guessing that you want to use OAuth 2.0 as the authorization protocol. This means that you want to use scopes or JWT claims to apply OPA authorization policies. Based on the information in the JWT, you can apply different authorization models such as GBAC, RBAC, ABAC, etc.
Here is an example of how to connect OPA with your Authorization Provider for validating the Access Token and extracting the claims:

Regards,

1 Like