question Re: Keycloak SSO Hive REST Catalog in Support Questions

Keycloak SSO Hive REST Catalog

NovSeek — Tue, 10 Mar 2026 14:57:46 GMT

Hi all

I am using Knox for CDP SSO and would like to Enable the REST Catalog Service but use Keycloak for SSO. Is this possible? Private CDP, not Cloud.

Thanks

Re: Keycloak SSO Hive REST Catalog

DianaTorres — Wed, 11 Mar 2026 02:34:23 GMT

@NovSeek Welcome to the Cloudera Community!

To help you get the best possible solution, I have tagged our Hive experts @Shmoo @mszurap @cravani @james_jones who may be able to assist you further.

Please keep us updated on your post, and we hope you find a satisfactory solution to your query.

Re: Keycloak SSO Hive REST Catalog

james_jones — Wed, 11 Mar 2026 03:22:35 GMT

@NovSeek Keycloak serves as an IDP for SAML so you can use the following provides instructions for SAML configuration. You could also create a custom topology if needed.
https://docs.cloudera.com/cdp-private-cloud-base/7.3.1/knox-authentication/topics/security-knox-authe-saml.html

Please check the following article for JWT configuration with Keycloak.
https://community.cloudera.com/t5/Community-Articles/Knox-Accept-third-party-JWT/ta-p/248488

The following article is for public cloud but may also apply to CDP private cloud as well, although I'm not certain. https://community.cloudera.com/t5/Community-Articles/How-to-configure-Single-Sign-On-SSO-for-CDP-Public-Cloud-the/ta-p/300222

I hope these help.

Re: Keycloak SSO Hive REST Catalog

NovSeek — Wed, 11 Mar 2026 08:31:54 GMT

Thanks.

Re: Keycloak SSO Hive REST Catalog

DianaTorres — Wed, 18 Mar 2026 00:26:09 GMT

@NovSeek Has the reply helped resolve your issue? If so, please mark the appropriate reply as the solution, as it will make it easier for others to find the answer in the future. Thanks.

Re: Keycloak SSO Hive REST Catalog

NovSeek — Thu, 19 Mar 2026 11:52:35 GMT

ignore