DevelopersTV

Simple Control: Managing Multi-Domain MCP Access Via Keycloak IdP With ID-JAG - Yutaka Obuchi

Keycloak Model context protocol Mcp Authorization Identity provider Jwt Id Jag Multi Domain access Enterprise security Token exchange Cross Domain authorization Cloud native security
CNCF
AI summary

This session demonstrates managing multi-domain MCP (Model Context Protocol) access using Keycloak as a centralized Identity Provider with ID-JAG for authorization. Targeted at security architects and platform engineers building enterprise AI agent systems, it shows how to externalize authorization from individual MCP servers to enable secure identity chaining across cross-trust domains. The live demo covers Keycloak's Token Exchange Provider implementation for fine-grained, cryptographically attested permissions.

Related videos