# Pritunl integration with Keycloak

**URL:** <https://forum.pritunl.com/t/pritunl-integration-with-keycloak/641>\
**Category:** Pritunl VPN\
**Created:** [December 27, 2022, 8:21am UTC](https://forum.pritunl.com/t/pritunl-integration-with-keycloak/641 "2022-12-27T08:21:38Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Bohdan](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/b/bbce88/32.png) [@Bohdan](https://forum.pritunl.com/u/Bohdan)\
**Post date:** [December 27, 2022, 8:21am UTC](https://forum.pritunl.com/t/pritunl-integration-with-keycloak/641/1 "2022-12-27T08:21:38Z")

</div>

Hello, Pritunl community and developers! 🙂

The enterprise version of Pritunl lists “Single Sign-On with SAML” as a feature.

There is no integration with Keycloak in the documentation from the available single sign-on points.

Do you plan to add this integration in the future?

Thanks 🙂  
Bohdan

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [December 27, 2022, 7:15pm UTC](https://forum.pritunl.com/t/pritunl-integration-with-keycloak/641/2 "2022-12-27T19:15:10Z")

</div>

Currently there isn’t any plans on adding support for Keycloak.

---

<div class="post-metadata">

**Author:** ![Bohdan](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/b/bbce88/32.png) [@Bohdan](https://forum.pritunl.com/u/Bohdan)\
**Post date:** [December 28, 2022, 8:13am UTC](https://forum.pritunl.com/t/pritunl-integration-with-keycloak/641/3 "2022-12-28T08:13:03Z")

</div>

Thanks for you reply!

---

<div class="post-metadata">

**Author:** ![sample](https://forum.pritunl.com/user_avatar/forum.pritunl.com/sample/32/806_2.png) [@sample](https://forum.pritunl.com/u/sample)\
**Post date:** [April 16, 2024, 12:01pm UTC](https://forum.pritunl.com/t/pritunl-integration-with-keycloak/641/4 "2024-04-16T12:01:09Z")

</div>

Hi. I wrote python script that acts as a middleware between Pritunl and Keycloak, performing real-time user status checks during VPN connection attempts. It ensures that:

- Only users who exist in Keycloak and are not blocked are allowed to access the Pritunl VPN.
- Users blocked with unverified email (optional check) are denied VPN access.

[Github repo](https://github.com/sample/pritunl-keycloak-user-check)

Also, I made simple instruction for keycloak and pritunl integration [here](https://github.com/sample/pritunl-keycloak-user-check/blob/main/PRITUNL-SAML-KEYCLOAK-INTEGRATION.md)
