# Configure Keycloak

## Overview

Keycloak, is an open source Identity and Access Management solution aimed at modern applications and services. It can be used as an authentication service instead of keystone.

## Configuration

Keycloak must be enabled explicitly in Vitrage configuration file The default authentication mode is keystone:

    [api]
    auth_mode = keycloak

    [keycloak]
    auth_url = http://<Keycloak-server-host>:<Keycloak-server-port>/auth
    insecure = False

- `auth_url` url of the Keycloak server defaults to `http://127.0.0.1:9080/auth`

- `insecure` If True, SSL/TLS certificate verification is disabled defaults to `False`

this page last updated: 2026-01-23 22:59:33

Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.

found an error? report a bug