Identity & Authentication - Identity Management & Authentication
Manage identity, authentication, and authorization using Keycloak, OPA, and Vault
Tags
Updated: 2026-03-22Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Configure Keycloak realms
- Create Keycloak clients
- Create Keycloak users
- Set Keycloak passwords
- Create Keycloak roles
- Assign Keycloak roles
- Get OIDC tokens
- Introspect tokens
- Write OPA policies
- Evaluate OPA policies
- Test OPA policies
- Start OPA server
- Query OPA server
- Enable Vault secrets engine
- Store Vault secrets
- Read Vault secrets
- List Vault secrets
- Create Vault policies
- Enable AppRole
- Create AppRole roles
Inputs
- Keycloak server URL
- Admin credentials
- Client configuration
- Redirect URIs
- Web origins
- User details
- Role names
- OPA policy files
- OPA input data
- Vault server address
- Vault authentication token
- Secret configuration
- Policy HCL files
- AppRole parameters
- Database connection parameters
- Database role definitions
- JWT tokens
- Policy queries
Outputs
- Keycloak realms
- Keycloak clients
- Keycloak users
- Keycloak roles
- OIDC access tokens
- Token validation results
- OPA policy decisions
- OPA policy test results
- Vault secret values
- Vault secret metadata
- Vault policies
- AppRole role IDs
- AppRole secret IDs
- Vault authentication tokens
- Database credentials
- JWT validation results
Requirements
- Keycloak server
- OPA server
- Vault server
- kcadm CLI
- OPA CLI
- Vault CLI
- Python PyJWT library