Hi guys,

I am looking for an extension that allows me to manage CKAN admins directly within Keycloak, without using the CKAN CLI or the CKAN admin UI.

Over the past week, I’ve been exploring CKAN extensions because I wanted to use Keycloak as an identity provider. It works well with several well-known extensions like saml2auth, ckanext-keycloak
, https://github.com/dathere/ckanext-sso
, and many others. At least these three worked for me.

However, what’s missing is an extension that allows us to manage CKAN admins directly through Keycloak. The https://github.com/bcgov/ckanext-sso
extension lets us manage admins using Keycloak groups, which is great, but it is mainly designed for API authentication and does not provide a proper UI flow or views. Therefore, it does not fit my use case.

If anyone knows of a good plugin that supports this, or has already forked a repository and implemented such functionality, I would be very grateful.

Thank you in advance.