Single Sign-On (SSO) Support

Describes how the HPE Ezmeral Data Fabric supports single sign-on (SSO).

Keycloak IAM Support

The HPE Ezmeral Data Fabric supports SSO when configured with the Keycloak identity and access management (IAM) solution. Other IAM solutions are not currently supported.

Keycloak Is Preinstalled and Preconfigured

Starting with release 7.5.0, Keycloak is preinstalled and preconfigured whenever you create a new fabric. You can create new users and roles easily and quickly by using the Keycloak administration console. For more information, see SSO Using Keycloak.

Limitation for Non-SSO Users

SSO users with sufficient credentials can view and manage resources on all fabrics. Non-SSO users can view and manage resources only on the fabric to which they are signed in. Non-SSO users cannot view or manage resources on other fabrics. The Data Fabric UI does not display these resources to non-SSO users because the UI cannot connect to other fabrics without the same login information.