Using endpoint entitlements and accounts in other endpoint

[Robbe_Cronos]

We have Keycloak setup in our company to federate other applications. What this means practically is:

When a user wants access to a specific application, he has to request a specific group of our keycloak endpoint.

It isn't very optimal to request every group needed in the keycloak endpoint as many people don't know how to traverse the Saviynt application that well.

We want to have an endpoint for every application that uses Keycloak groups for access, using the Keycloak connection and security system. In this endpoint, only the Keycloak group needed to access that application is given as an option to request. This endpoint will use Keycloak accounts and entitlements.

Is this possible to configure?

Kind regards,

Robbe

[rushikeshvartak · Accepted solution]

Configure keycloak as mapped endpoint. If user don’t want to know about keycloak account then use entitlement map / application role