# XDMoD and OOD questions

**URL:** <https://discourse.openondemand.org/t/xdmod-and-ood-questions/1086>\
**Category:** Get Help\
**Created:** [August 26, 2020, 11:45pm UTC](https://discourse.openondemand.org/t/xdmod-and-ood-questions/1086 "2020-08-26T23:45:38Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![mcuma](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/mcuma/32/171_2.png) [@mcuma](https://discourse.openondemand.org/u/mcuma)\
**Post date:** [August 26, 2020, 11:45pm UTC](https://discourse.openondemand.org/t/xdmod-and-ood-questions/1086/1 "2020-08-26T23:45:38Z")

</div>

We are setting up connection to our XDMoD, following the guide in the 1.8 release notes.

One thing that Steve, our admin who runs the Keycloak noted, is to add where the Keycloak security setting is. He found it at:  
Realm-\>Master-\>Security Defenses-\>Headers-\>Content-Security-Policy  
Perhaps it’d be good to add it to the documentation?

Now we seem to be stuck at the authentication with XDMoD. We use simplesamlphp to campus CAS in XDMoD and Keycloak in OOD. Do we need to move XDMoD to Keycloak to use the same SSO? Or any other useful pointers in this regard?

Thanks,  
MC

---

<div class="post-metadata">

**Author:** ![tdockendorf](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/tdockendorf/32/202_2.png) [@tdockendorf](https://discourse.openondemand.org/u/tdockendorf)\
**Post date:** [August 27, 2020, 1:02pm UTC](https://discourse.openondemand.org/t/xdmod-and-ood-questions/1086/2 "2020-08-27T13:02:01Z")

</div>

The only way I know to do SSO with OOD and XDMOD is for them to have the same backing IDP like Keycloak. Because Keycloak supports SAML and OIDC , that’s what we do at OSC is having both systems authenticate with Keycloak.

If your campus system was SAML or OIDC there might be a way to authenticate with campus credentials in Keycloak by setting your campus as Identity Broker IIRC but I do not think Keycloak supports CAS for identity brokering. We do something similar at OSC so that users can authenticate through CILogon using Keycloak rather than forcing them to authenticate against our local LDAP backing Keycloak.

---

<div class="post-metadata">

**Author:** ![jeff.ohrstrom](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/jeff.ohrstrom/32/136_2.png) [@jeff.ohrstrom](https://discourse.openondemand.org/u/jeff.ohrstrom)\
**Post date:** [April 29, 2021, 3:32pm UTC](https://discourse.openondemand.org/t/xdmod-and-ood-questions/1086/3 "2021-04-29T15:32:42Z")

</div>

Where you able to make any progress on this @mcuma ?

---

<div class="post-metadata">

**Author:** ![mcuma](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/mcuma/32/171_2.png) [@mcuma](https://discourse.openondemand.org/u/mcuma)\
**Post date:** [April 29, 2021, 4:06pm UTC](https://discourse.openondemand.org/t/xdmod-and-ood-questions/1086/4 "2021-04-29T16:06:36Z")

</div>

No progress there but there is a discussion on a plan. I don’t think you need to worry about this, our admins will sort it out, it sounds to me that they know what needs to be done.

---

<div class="post-metadata">

**Author:** ![westburg.2](https://avatars.discourse-cdn.com/v4/letter/w/0ea827/32.png) [@westburg.2](https://discourse.openondemand.org/u/westburg.2)\
**Post date:** [May 26, 2022, 3:42pm UTC](https://discourse.openondemand.org/t/xdmod-and-ood-questions/1086/5 "2022-05-26T15:42:55Z")

</div>

Closed on May 26, 2022, 3:42pm UTC