# Keyclaok integration and permission questions

**URL:** <https://forum.ansible.com/t/keyclaok-integration-and-permission-questions/3509>\
**Category:** Get Help\
**Tags:** awx\
**Created:** [January 29, 2024, 2:11pm UTC](https://forum.ansible.com/t/keyclaok-integration-and-permission-questions/3509 "2024-01-29T14:11:12Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![x980707x](https://avatars.discourse-cdn.com/v4/letter/x/ecae2f/32.png) [@x980707x](https://forum.ansible.com/u/x980707x)\
**Post date:** [January 29, 2024, 2:11pm UTC](https://forum.ansible.com/t/keyclaok-integration-and-permission-questions/3509/1 "2024-01-29T14:11:12Z")

</div>

Hi,  
I have integrated AWX with Keycloak using SAML. After the SAML integration, I’ve successfully controlled permissions in AWX based on LDAP information. However, I would like to assign permissions in AWX using Keycloak roles. Is there a way to achieve this?

Thanks!

---

<div class="post-metadata">

**Author:** ![ptn](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/ptn/32/481_2.png) [@ptn](https://forum.ansible.com/u/ptn)\
**Post date:** [January 29, 2024, 5:21pm UTC](https://forum.ansible.com/t/keyclaok-integration-and-permission-questions/3509/2 "2024-01-29T17:21:39Z")

</div>

Hi,

I think that’s what you’re after: [20. Setting up Social Authentication — Ansible Tower Administration Guide v3.8.6](https://docs.ansible.com/ansible-tower/latest/html/administration/social_auth.html#ag-org-team-maps), or at least part of it.

Also: [awx/docs/auth/saml.md at devel · ansible/awx · GitHub](https://github.com/ansible/awx/blob/devel/docs/auth/saml.md#configure-saml-for-team-and-organization-membership).

---

<div class="post-metadata">

**Author:** ![x980707x](https://avatars.discourse-cdn.com/v4/letter/x/ecae2f/32.png) [@x980707x](https://forum.ansible.com/u/x980707x)\
**Post date:** [February 1, 2024, 6:20am UTC](https://forum.ansible.com/t/keyclaok-integration-and-permission-questions/3509/3 "2024-02-01T06:20:27Z")

</div>

Thanks!  
I solved it by changing saml\_attr.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/ansible/original/1X/1882d9a01da5d8996a862359b0913cc568a39b84.svg) [@system](https://forum.ansible.com/u/system)\
**Post date:** [March 2, 2024, 6:21am UTC](https://forum.ansible.com/t/keyclaok-integration-and-permission-questions/3509/4 "2024-03-02T06:21:06Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.