'Hashicorp Vault OIDC Auth via Keycloak with multiple clients of type Client Credentials Grant
I have a backend REST API system (say A) which basically authenticates the incoming requests via Keycloak's introspect API.
Why am I using introspect API instead Auth API?
We have 2 types of clients such as public (say X) and confidential (say B), which need to access the APIs of A. For more details about the system, please check this QA.
Requirement:
To enable Keycloak as the identity provider for Hashicorp Vault, where the requests will come from multiple clients of type confidential (client-credentials grant).
The resources that I found online are having only Password Grant flow support and not the Client Credentials grant.
Please clarify, whether,
- It is possible to configure multiple clients with Client Credentials ? i.e. Can Vault authenticate the requests from multiple clients (B and A) which are of type confidential with the help of Keycloak?
- If the option 1 doesn't work, which type of auth can be set to the Vault, rather than OIDC.
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|