hi. has anyone experience with using keto in combination with keycloak? keycloak would provide authentiation and keto for authorization. • Keycloak holds users and roles • Keto permissions for the roles Just want to understand a bit better what information do we need to write in tuples in keto. Do we need to write an entry for each user, or just one for the role? How would we keep roles in sync? And so on 🙂

I guess the answer is: it depends Keto is generally very flexible, which comes with the price of having to find your way to implement it and make it work for you Generally it is best to keep all authentication, including role assignments, inside of Keto. That way you can use those relation tuples as needed.

How would we keep roles in sync?

We are already thinking about migrations, but that is in a very early state rn.

Just want to understand a bit better what information do we need to write in tuples in keto

I'd say start at what checks do you want to do. All tuples required for those checks have to be in Keto.