# \[SSO - Keycloak\] sync users and groups membership in the app

**URL:** https://forum.meet.coop/t/sso-keycloak-sync-users-and-groups-membership-in-the-app/715
**Category:** Sector - toolstack
**Created:** [16 September 2021 15:53 UTC](https://forum.meet.coop/t/sso-keycloak-sync-users-and-groups-membership-in-the-app/715 "2021-09-16T15:53:12Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![pierreozoux](https://forum.meet.coop/user_avatar/forum.meet.coop/pierreozoux/32/432_2.png) [@pierreozoux](https://forum.meet.coop/u/pierreozoux)
#### Post date: [16 September 2021 15:53 UTC](https://forum.meet.coop/t/sso-keycloak-sync-users-and-groups-membership-in-the-app/715/1 "2021-09-16T15:53:12Z")

</div>

Hey,

I’m Pierre from indieHosters.

With @unteem I follow your initiative, and it is really nice and beautiful 🙂  
(I’d like to do the same for emails for hosters, but this is another topic 😉 )

I just came to share this project we plan to work on:

> **[\[SSO - Keycloak\] sync users and groups membership in the app](https://talk.libreho.st/t/sso-keycloak-sync-users-and-groups-membership-in-the-app/463)**
>
> Hey! Long time no see 🙂 I’ve a topic to discuss, and I think here is the best place to do so. Context As you may know or not, we offer RocketChat and Nextcloud behind Keycloak to our users. For RocketChat, we use oauth/oidc and saml for...

If you have feedback, feel free to share here or there!

Cheers!

---

<div class="post-metadata">

### Author: ![wouter](https://forum.meet.coop/user_avatar/forum.meet.coop/wouter/32/318_2.png) [@wouter](https://forum.meet.coop/u/wouter)
#### Post date: [20 September 2021 11:15 UTC](https://forum.meet.coop/t/sso-keycloak-sync-users-and-groups-membership-in-the-app/715/2 "2021-09-20T11:15:49Z")

</div>

Hi @pierreozoux , so great to see you here! The SSO is still on our roadmap. @unteem has explained your experience with keycloak at Indiehosters. It’ll be very important for meet.coop to get this set up properly, to improve the sign-up flow, allow us to manage user groups and access various services with the same login.

We’ll be needing to plan for when we can do it and who will be helping us to get it set up, configured and integrated. @3wc @decentral1se @Yurko @dvdjaco @elon: the things Pierre describes in their forum post should be useful to us as well, once we have keycloak in operation?

---

<div class="post-metadata">

### Author: ![pierreozoux](https://forum.meet.coop/user_avatar/forum.meet.coop/pierreozoux/32/432_2.png) [@pierreozoux](https://forum.meet.coop/u/pierreozoux)
#### Post date: [20 September 2021 16:10 UTC](https://forum.meet.coop/t/sso-keycloak-sync-users-and-groups-membership-in-the-app/715/3 "2021-09-20T16:10:45Z")

</div>

If you need help, let us know 🙂

---

<div class="post-metadata">

### Author: ![decentral1se](https://forum.meet.coop/user_avatar/forum.meet.coop/decentral1se/32/26_2.png) [@decentral1se](https://forum.meet.coop/u/decentral1se)
#### Post date: [22 September 2021 13:08 UTC](https://forum.meet.coop/t/sso-keycloak-sync-users-and-groups-membership-in-the-app/715/4 "2021-09-22T13:08:19Z")

</div>

Hey @wouter @pierreozoux I am very interested to discuss this and potentially help out (Golang hackers united). With [Autonomic](https://autonomic.zone) we’re hosting a couple of Keycloak x `$other_services` and have faced the issues you have laid out in your Librehosters thread. It might be nice to compare our needs to see that it lines up and that the results could be put to use for n+1 organisations from the start!

Relatedly, I’ve worked on a small proof-of-concept Python app over in [autonomic-cooperative/keycloak-collective-portal](https://git.autonomic.zone/autonomic-cooperative/keycloak-collective-portal) and had experience using the Keycloak REST API and seen a lot of potential there for getting functionality like you describe out of it.

And ofc in general this will then benefit Meet co-op which we’ve always understood to require quite a complex use-case for a kind of distributed self-managed SSO. There was some use-cases listed on [Autonomic-Cooperative/keycloak-collective-portal (Github)](https://github.com/Autonomic-Cooperative/keycloak-collective-portal/issues) for that.
