Integrating Camunda Operate and Optimize in a Multi-Tenant SaaS Model with Keycloak SSO

Camunda 8 Topics
1

Hi Team,

We are utilizing Camunda in a multi-tenant model for our SaaS product. Our current authentication setup leverages Keycloak, where each customer is assigned a separate realm. This setup works well with our product, allowing each customer to use their own SSO via Keycloak.

However, we face a unique challenge when extending this to Camunda’s Operate and Optimize tools. We aim to have a single URL for these tools, where customers can log in and access their specific data. The primary issue is enabling customers to use their SSO with our SaaS product, configured in their respective Keycloak realms.

Current Setup:

  • SaaS Product: Multi-tenant model using Keycloak for authentication.
  • Keycloak: Each customer has a dedicated realm.
  • Camunda: Deployed in a multi-tenant setup, but needs to integrate with the customer’s SSO.

Challenge:

  • Providing a single URL for Operate and Optimize that allows customers to log in with their respective Keycloak SSO.
  • Ensuring seamless SSO integration for each customer without manual realm switching.

Seeking Advice:

  • How can we effectively implement this architecture?
  • Are there any best practices or recommended configurations for integrating Camunda Operate and Optimize in a multi-tenant environment with Keycloak?
  • Any suggestions on improving the user experience while maintaining security and isolation for each tenant?
2

Hi @cherry_yahoo - are you not using Identity with multi-tenancy enabled? With Identity, you can assign individual users to tenants.

Based on the architecture you’ve described, you should have an enterprise license to run Camunda; because this is a more complicated setup, and somewhat unique your particular use case, I would recommend reaching out to our enterprise support team.

3

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.