Repository navigation
"Keycloak Authorization Not Enforced in External Applications (Salesforce, O365, Workday)" #40582
Unanswered
RuchiSingh18
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
I'm using the latest Keycloak authorization features and have extended them in my code. I’ve configured resources, time-based policies, and permissions, and everything works as expected when testing with OAuth tools that support authorization mechanisms.
However, when I try to use this setup with real-world applications like Salesforce, Microsoft 365 (O365), or Workday, only authentication works — the authorization policies are not being enforced. These applications don't seem to respect or invoke the Keycloak authorization checks.
Questions:
How can I make Keycloak authorization work with these external applications?
Are there specific applications or integration patterns where Keycloak's authorization functionality works end-to-end?
Is there a list of applications known to support and work correctly with Keycloak authorization services?
Any guidance or examples would be highly appreciated. Thank you!
All reactions