Set up the Helm chart with an external OIDC provider

Instead of using internal Keycloak, you can configure Camunda to connect to an external OpenID Connect (OIDC) identity provider, such as an external Keycloak, Microsoft Entra ID, or Okta.

The Helm chart offers these options:

External Keycloak

Use an externally hosted Keycloak instance where the Camunda Management Identity component can automatically populate the realm.

Microsoft Entra

Connect Camunda to Microsoft Entra ID for authentication and authorization.

Generic OIDC provider

Connect Camunda to any OIDC-compliant provider or Keycloak without Management Identity setup support.

Troubleshoot OIDC authentication

Common issues and solutions when configuring OIDC authentication for Camunda 8 Self-Managed.