Keycloak SSO Hive REST Catalog

[#1]

Hi all

I am using Knox for CDP SSO and would like to Enable the REST Catalog Service but use Keycloak for SSO. Is this possible? Private CDP, not Cloud.

Thanks

[#2]

@NovSeek Welcome to the Cloudera Community!

To help you get the best possible solution, I have tagged our Hive experts @Shmoo @mszurap @cravani @james_jones  who may be able to assist you further.

Please keep us updated on your post, and we hope you find a satisfactory solution to your query.

[#3]

@NovSeek   Keycloak serves as an IDP for SAML so you can use the following provides instructions for SAML configuration. You could also create a custom topology if needed.
https://docs.cloudera.com/cdp-private-cloud-base/7.3.1/knox-authentication/topics/security-knox-auth...

Please check the following article for JWT configuration with Keycloak.
https://community.cloudera.com/t5/Community-Articles/Knox-Accept-third-party-JWT/ta-p/248488

The following article is for public cloud but may also apply to CDP private cloud as well, although I'm not certain.  https://community.cloudera.com/t5/Community-Articles/How-to-configure-Single-Sign-On-SSO-for-CDP-Pub...

I hope these help. 

[#4]

Thanks.

[#5]

 ignore

[#6 · Accepted solution]

@NovSeek Has the reply helped resolve your issue? If so, please mark the appropriate reply as the solution, as it will make it easier for others to find the answer in the future. Thanks.