# Using custom authorization with REST module

**URL:** <https://forum.flowable.org/t/using-custom-authorization-with-rest-module/3488>\
**Category:** Flowable Engine\
**Created:** [February 25, 2019, 4:36am UTC](https://forum.flowable.org/t/using-custom-authorization-with-rest-module/3488 "2019-02-25T04:36:19Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![pahujadeepanshu](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/pahujadeepanshu/32/837_2.png) [@pahujadeepanshu](https://forum.flowable.org/u/pahujadeepanshu)\
**Post date:** [February 25, 2019, 4:36am UTC](https://forum.flowable.org/t/using-custom-authorization-with-rest-module/3488/1 "2019-02-25T04:36:19Z")

</div>

Dear Experts,

I am using flowable as a service with our other software and would like to use keycloak or any other authentication/authorization for user management.  
I am using all modules of flowable as spring boot application and would like all the apps to use my authentication/authorization rather than flowable user/roles or LDAP.

Is there a way to do this?  
If yes, is there any sample code I can refer to?

Thanks,  
Deepanshu

---

<div class="post-metadata">

**Author:** ![Robinyo](https://avatars.discourse-cdn.com/v4/letter/r/dec6dc/32.png) [@Robinyo](https://forum.flowable.org/u/Robinyo)\
**Post date:** [February 25, 2019, 10:07pm UTC](https://forum.flowable.org/t/using-custom-authorization-with-rest-module/3488/2 "2019-02-25T22:07:16Z")

</div>

> As you know the UI applications are Spring Boot applications which means that they are using Spring Security for the security. Have you had a look at the [Keycloak Spring Boot Adapter](https://www.keycloak.org/docs/latest/securing_apps/index.html#_spring_boot_adapter) which uses the [Keycloak Spring Security Adapter](https://www.keycloak.org/docs/latest/securing_apps/index.html#_spring_security_adapter).

Ref: [External authentication with Keycloak](https://github.com/flowable/flowable-engine/pull/1447#pullrequestreview-187318618)

---

<div class="post-metadata">

**Author:** ![pahujadeepanshu](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/pahujadeepanshu/32/837_2.png) [@pahujadeepanshu](https://forum.flowable.org/u/pahujadeepanshu)\
**Post date:** [April 8, 2019, 7:39am UTC](https://forum.flowable.org/t/using-custom-authorization-with-rest-module/3488/3 "2019-04-08T07:39:42Z")

</div>

Hi All,

I have a very typical problem. I am using modeler, IDM and REST WARs running as a spring boot application for a project and I have pointed to REST for modeler than using TASK. Now I have a login management module which provides REST APIs for user Authentication and Authorization.

I am not sure how and where to change to enable Modeler and REST to do all authorization using my Authorization module.  
Any sample code or pointers will be very helpful.

PS : I am new to Spring and Spring Boot.

Thanks in advance!  
Deepanshu
