# Keycloak integration

**URL:** <https://discuss.konghq.com/t/keycloak-integration/470>\
**Category:** Questions\
**Created:** [January 31, 2018, 2:33pm UTC](https://discuss.konghq.com/t/keycloak-integration/470 "2018-01-31T14:33:59Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Alejandro\_Gomez\_Cana](https://avatars.discourse-cdn.com/v4/letter/a/57b2e6/32.png) [@Alejandro\_Gomez\_Cana](https://discuss.konghq.com/u/Alejandro_Gomez_Cana)\
**Post date:** [January 31, 2018, 2:33pm UTC](https://discuss.konghq.com/t/keycloak-integration/470/1 "2018-01-31T14:33:59Z")

</div>

Hi guys!  
I have some questions about how integrate kong with keycloak scopes because i havent find any plugin to verify a scope inside jwt for an endpoint. There are any plugin for this even in enterprise version.

Thanks guys!!

---

<div class="post-metadata">

**Author:** ![bungle](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/bungle/32/13_2.png) [@bungle](https://discuss.konghq.com/u/bungle)\
**Post date:** [February 1, 2018, 4:24pm UTC](https://discuss.konghq.com/t/keycloak-integration/470/2 "2018-02-01T16:24:42Z")

</div>

Yes, in enterprise version we do have a quite well featured plugin named OpenID Connect:  
[https://getkong.org/plugins/ee-openid-connect/](https://getkong.org/plugins/ee-openid-connect/)

I personally have tested it with Keycloak, and I can confirm it works great!

Back to your question about scopes. Currently our plugin can check the `audience` (actually `aud`) claim and act upon that, but not yet the `scopes`. I recently got asked about the same, so we are adding that quite soon. It is not a big thing to do.

On community edition we have JWT Plugin:  
[https://getkong.org/plugins/jwt/](https://getkong.org/plugins/jwt/)

But that doesn’t support scopes verification and doesn’t support automation such as OpenID Connect discovery. You could quite easily add `scopes` verification to it, and send a PR (or make your own fork), there are the current rules:

> <https://github.com/Kong/kong/blob/master/kong/plugins/jwt/jwt_parser.lua#L238-L255>
