OpenZiti with Keycloak

1

Hi, I’ve started exploring OpenZiti. I want to set up our Keycloak as a JWT identity provider and restrict access to it (Keycloak) for users who haven't passed posture checks, specifically for members of a particular Keycloak group.

Is this achievable? I would appreciate your insights.

2

Hi @jkovaliov, welcome to the community and to OpenZiti!

At this time there is no posture check associated to the claims in a token from an IdP. Personally, I think that's an interesting idea, but it's not implemented at this time.