Hi,

Greetings. I am on Pega 7.3.1 and client wants to use OAUTH 2.0 as a SSO protocol from KeyCloak, i have following questions

1. Can someone provide me any pointers on how to start with establishing OAUTH 2.0 as a SSO? I have seen authentication service in Pega 7.3.1 but not sure how that fits with custom authentication. Has anyone implemented this?

2. Regarding SAML 2.0, I see in Pega rule form that Pega acts a a Service Provider however in my scenario Pega should just be a consumer from KeyCloak (which uses RedHAT SSO), do we need to create OAUTH 2.0 Provider data instances? Does anyone know where to start?

3. I have done a KeyCloak OIDC PoC outside Pega, but does Pega suppport OIDC?

Appreciate any help or suggestions!

Regards,

Bharat