Skip to main content
NovSeek
NovSeek
Silver ⭐️⭐️
March 10, 2026
Solved

Keycloak SSO Hive REST Catalog

Hi all

I am using Knox for CDP SSO and would like to Enable the REST Catalog Service but use Keycloak for SSO. Is this possible? Private CDP, not Cloud.

 

Thanks

DianaTorres
DianaTorresAnswer
Community Manager
March 18, 2026

@NovSeek Has the reply helped resolve your issue? If so, please mark the appropriate reply as the solution, as it will make it easier for others to find the answer in the future. Thanks.

Regards, Diana Torres, Senior Community Moderator
View in thread

5 replies

DianaTorres
Community Manager
DianaTorres
Community Manager
March 11, 2026

@NovSeek Welcome to the Cloudera Community!

To help you get the best possible solution, I have tagged our Hive experts @Shmoo @mszurap @cravani @james_jones  who may be able to assist you further.

Please keep us updated on your post, and we hope you find a satisfactory solution to your query.

Translate
Regards, Diana Torres, Senior Community Moderator
james_jones
Gold ⭐️⭐️⭐️
james_jones
Gold ⭐️⭐️⭐️
March 11, 2026

@NovSeek   Keycloak serves as an IDP for SAML so you can use the following provides instructions for SAML configuration. You could also create a custom topology if needed.
https://docs.cloudera.com/cdp-private-cloud-base/7.3.1/knox-authentication/topics/security-knox-authe-saml.html

Please check the following article for JWT configuration with Keycloak.
https://community.cloudera.com/t5/Community-Articles/Knox-Accept-third-party-JWT/ta-p/248488

The following article is for public cloud but may also apply to CDP private cloud as well, although I'm not certain.  https://community.cloudera.com/t5/Community-Articles/How-to-configure-Single-Sign-On-SSO-for-CDP-Public-Cloud-the/ta-p/300222

I hope these help. 

Translate
NovSeek
NovSeekAuthor
Silver ⭐️⭐️
March 11, 2026
Thanks.
Translate
DianaTorres
Community Manager
DianaTorresAnswer
Community Manager
March 18, 2026

@NovSeek Has the reply helped resolve your issue? If so, please mark the appropriate reply as the solution, as it will make it easier for others to find the answer in the future. Thanks.

Translate
Regards, Diana Torres, Senior Community Moderator
Terms & ConditionsAccessibility statement