Skip to content

Keycloak

Starting with 2027.0, Keycloak is the identity and authentication provider for Altair SLC Hub. Keycloak is an open-source Identity and Access Management (IAM) solution that handles authentication, session management, user federation, and identity brokering.

Altair SLC Hub continues to handle authorisation through its own role-based access control (RBAC) system.

This section explains which parts of Keycloak are relevant to you as a Altair SLC Hub administrator, what you are expected to configure there, and what Altair SLC Hub continues to handle on its own. It is not a replacement for the official Keycloak documentation — where deeper detail is needed, individual pages link there directly.

What Keycloak handles and what Altair SLC Hub still handles

Keycloak is a large product. This section clarifies which parts are relevant to Altair SLC Hub administrators.

Keycloak handles

Altair SLC Hub still handles

  • User and group management — via the Altair SLC Hub portal
  • Role-based access control — who can do what inside Altair SLC Hub
  • Job execution and OS-level user mapping

Note

You do not need to manage users or groups directly in Keycloak. The Altair SLC Hub portal is the right place for day-to-day user and group management.

What has not changed

To avoid confusion, the following things work the same as before:

  • User and group management is still done through the Altair SLC Hub portal. You do not need to manage users in the Keycloak Admin Console for day-to-day administration.
  • Default groups are unchanged from the previous release.
  • Job execution and OS user mapping — Altair SLC Hub continues to handle this. Keycloak provides the authenticated identity; Altair SLC Hub maps it to the correct OS user using the required attributes described in LDAP and Active Directory and Identity Providers.
  • The OIDC discovery endpoint — existing clients such as Altair Analytics Workbench continue to work without reconfiguration.
  • Role-based access control — roles and permissions within Altair SLC Hub are unchanged in how they work. It is only the default roles provided by Altair SLC Hub that have changed.