# Flowable integration with Keycloak

**URL:** <https://forum.flowable.org/t/flowable-integration-with-keycloak/456>\
**Category:** Flowable Engine\
**Created:** [April 7, 2017, 12:29am UTC](https://forum.flowable.org/t/flowable-integration-with-keycloak/456 "2017-04-07T00:29:03Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![ravthiru](https://avatars.discourse-cdn.com/v4/letter/r/8c91f0/32.png) [@ravthiru](https://forum.flowable.org/u/ravthiru)\
**Post date:** [April 7, 2017, 12:29am UTC](https://forum.flowable.org/t/flowable-integration-with-keycloak/456/1 "2017-04-07T00:29:03Z")

</div>

We are already using Keycloak for User and Group store , is it possible to integrate Flowable to third party IDM like Keycloak.

---

<div class="post-metadata">

**Author:** ![tijs](https://avatars.discourse-cdn.com/v4/letter/t/bc79bd/32.png) [@tijs](https://forum.flowable.org/u/tijs)\
**Post date:** [April 7, 2017, 2:55pm UTC](https://forum.flowable.org/t/flowable-integration-with-keycloak/456/2 "2017-04-07T14:55:35Z")

</div>

Hi,

Yes sure. The IdentityService is pluggable so you can create a Keycloak implementation of the IdentityService and use that implementation instead of the default simple db one.

Best regards,

Tijs

---

<div class="post-metadata">

**Author:** ![ravthiru](https://avatars.discourse-cdn.com/v4/letter/r/8c91f0/32.png) [@ravthiru](https://forum.flowable.org/u/ravthiru)\
**Post date:** [April 21, 2017, 2:30am UTC](https://forum.flowable.org/t/flowable-integration-with-keycloak/456/3 "2017-04-21T02:30:04Z")

</div>

thanks Tijs  
Is RemoteIdmService is the right interface to implement for custom idm ?

---

<div class="post-metadata">

**Author:** ![tijs](https://avatars.discourse-cdn.com/v4/letter/t/bc79bd/32.png) [@tijs](https://forum.flowable.org/u/tijs)\
**Post date:** [April 24, 2017, 5:38pm UTC](https://forum.flowable.org/t/flowable-integration-with-keycloak/456/4 "2017-04-24T17:38:01Z")

</div>

Hi,

RemoteIdmService is used within the Flowable Task application to get IDM information from the IDM app. If you want to integrate Keycloak you need to integrate it into the IdmEngineConfiguration with a custom implementation of the IdmIdentityService.

Best regards,

Tijs

---

<div class="post-metadata">

**Author:** ![chrisburrell](https://avatars.discourse-cdn.com/v4/letter/c/50afbb/32.png) [@chrisburrell](https://forum.flowable.org/u/chrisburrell)\
**Post date:** [February 11, 2019, 12:15pm UTC](https://forum.flowable.org/t/flowable-integration-with-keycloak/456/5 "2019-02-11T12:15:02Z")

</div>

> [@tijs](#):
>
> IdmEngineConfiguration

Hi @ravthiru - did you ever implement a Keycloak integration?  
Cheers  
Chris

---

<div class="post-metadata">

**Author:** ![ravthiru](https://avatars.discourse-cdn.com/v4/letter/r/8c91f0/32.png) [@ravthiru](https://forum.flowable.org/u/ravthiru)\
**Post date:** [February 11, 2019, 8:26pm UTC](https://forum.flowable.org/t/flowable-integration-with-keycloak/456/6 "2019-02-11T20:26:33Z")

</div>

Yes we were able to implement Flowable Engine as bearer client.

---

<div class="post-metadata">

**Author:** ![derEisele](https://avatars.discourse-cdn.com/v4/letter/d/a9a28c/32.png) [@derEisele](https://forum.flowable.org/u/derEisele)\
**Post date:** [November 27, 2019, 1:02pm UTC](https://forum.flowable.org/t/flowable-integration-with-keycloak/456/7 "2019-11-27T13:02:37Z")

</div>

FYI, I figured out, that you could theoretically build a IdmIdentityService using the `Resource Owner Password Credentials Grant` flow of OAuth2, also known as `Direct Access Grant` in Keyloak to validate Credentials. In addition, Keycloak allows Service Accounts to access user and group lists and other properties of the Keycloak instance via it’s Admin rest API [Keycloak Docs](https://www.keycloak.org/docs-api/8.0/rest-api/index.html). In this configuration a IdmIdentityService could just work like the LDAP one without duplicated user storage.

---

<div class="post-metadata">

**Author:** ![adolg](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/adolg/32/1505_2.png) [@adolg](https://forum.flowable.org/u/adolg)\
**Post date:** [December 18, 2019, 12:42pm UTC](https://forum.flowable.org/t/flowable-integration-with-keycloak/456/8 "2019-12-18T12:42:52Z")

</div>

@derEisele, do you have some code to share?  
I am developing sync from KeyCloak (via REST API) to flowable-idm db similar to how KeyCloak LDAP sync works (on demand, when flowable-idm doesn’t know the user, it looks him/her up in KeyCloak and saves to db configured in Flowable)