Keycloak Organizational Data

The Backstage catalog can be set up to ingest organizational data — users and groups — directly from Keycloak. The result is a hierarchy of User and Group kind entities that mirror your Keycloak realm.

This integration is provided by the community-maintained @backstage-community/plugin-catalog-backend-module-keycloak plugin.

Ingesting users and groups from Keycloak pairs well with Keycloak authentication, where the imported User entities allow sign-in resolvers to match the signed-in user. See the Keycloak authentication provider documentation for how to set that up.

Installation and configuration

For setup instructions, including Keycloak client permissions, schedule configuration, and user and group transformers, see the plugin documentation.