Access by external identity provider

%3CLINGO-SUB%20id%3D%22lingo-sub-1442858%22%20slang%3D%22en-US%22%3EAccess%20by%20external%20identity%20provider%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1442858%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%40All%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20want%20to%20use%20an%20external%20identity%20provider%20(keycloak)%20to%20manage%20A%26amp%3BA%20for%20users%20without%20Azure%20account.%20I'm%20aware%2C%20that%20this%20could%20be%20achieved%20via%20Azure%20AD%20B2C%2C%20but%20unfortunately%20the%20higher%20ups%20don't%20want%20that%20solution.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20is%20something%20like%20that%20possible%20at%20all%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20first%20draft%20would%20be%20something%20like%3C%2FP%3E%3CP%3E*%20create%20managed%20identity%20for%20each%20right-set%3C%2FP%3E%3CP%3E*%20assign%20keycloak-role%20to%20given%20managed%20identity%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20would%20one%20advance%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%3C%2FP%3E%3CP%3EBrigitte%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1442858%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Frequent Visitor

Hi @All,

 

I want to use an external identity provider (keycloak) to manage A&A for users without Azure account. I'm aware, that this could be achieved via Azure AD B2C, but unfortunately the higher ups don't want that solution.

 

So is something like that possible at all?

 

My first draft would be something like

* create managed identity for each right-set

* assign keycloak-role to given managed identity

 

How would one advance?

 

Regards,

Brigitte

0 Replies