For the complete documentation index, see llms.txt.
Skip to main content
Version: 8.8

Configuration

Configure Management Identity for your Camunda 8 Self-Managed deployment. This guide covers application-level configuration, including environment variables and IdP settings.

Deploying with Helm?

If you deploy Camunda 8 Self-Managed with Helm, use the Helm chart authentication and authorization guides to configure OIDC and Management Identity:

Configure Management Identity IdP​

When a deployment includes Management Identity, it uses the packaged Keycloak as its identity provider (IdP) by default.

You can configure your Management Identity IdP using the following options:

IdP configurationDescription
Connect to an identity providerConnect to an OpenID Connect (OIDC) authentication provider to replace Keycloak.
Connect to an existing Keycloak instanceConnect Management Identity to your existing Keycloak instance.
Configure an external IdP using KeycloakConfigure an external identity provider using Keycloak, such as OpenID Connect, SAML, LDAP, or Active Directory.
note
  • Management Identity relies on a PostgreSQL. When running Management Identity with an external OIDC provider, you can connect to an alternative Database if your internal policies or compliance requirements prevent the use of PostgreSQL.
  • Keycloak starts in the full and standalone Web Modeler Docker Compose configurations and in the default Helm chart deployment. The lightweight Docker Compose configuration does not start Management Identity or Keycloak.