
Amazon QuickSight now supports federated single sign-on with open-source identity provider Keycloak, enabling centralized user authentication and role-based access control for BI applications.


<div><p>This article provides a step-by-step guide to configure federated single sign-on (SSO) between Amazon QuickSight and the open-source Keycloak identity provider.</p><ul><li>Register a Keycloak client application and configure SAML federation properties</li><li>Download Keycloak SAML metadata and add it as an IAM identity provider in AWS</li><li>Create three IAM policies for QuickSight roles: Admin, Author, and Reader</li><li>Create corresponding IAM roles that Keycloak users assume when federating</li><li>Map IAM roles to Keycloak groups and users via SAML mappers</li><li>Create Keycloak groups and users for testing SSO access to QuickSight</li><li>Test federated access using Keycloak credentials to sign into QuickSight</li></ul><p>This integration enables organizations to centralize identity management using Keycloak while controlling QuickSight access through role-based permissions.</p></div>


Related articles