---
title: Keycloak
slug: experience/keycloak
description: Keycloak
docTags: 
createdAt: 2023-01-09T12:48:50.000Z
---

# Summary

The Keycloak entitlement integration offers a simple OpenID-compatible entitlement solution. Any authorized users gain full access to all contents of an app.

:::hint{type="info"}
This entitlement integration supports two logout modes: back-channel and front-channel logout. Different entitlement types differentiate the modes, but otherwise the modes behave exactly the same.
:::

# Configuration parameters

| Parameter name                 | Type   | Description                                                                                 |
| ------------------------------ | ------ | ------------------------------------------------------------------------------------------- |
| Client ID                      | String | Client ID as provided by the provider                                                       |
| Client Secret                  | String | Client Secret as provided by the provider                                                   |
| URL                            | String | The base URL for the Keycloak realm.                                                        |
| Cache Validity in Minutes
 | Number | Number of minutes that information (e.g. OpenID configuration) about the realm are cached.  |