Proxmox VE with Keycloak: OpenID Connect login (openid realm)

Confidential OIDC client in Keycloak, pveum realm add –type openid with preferred_username as the username claim, autocreate and ACLs. The old guides with /auth/realms/ and a ‘username’ mapper are no longer needed.

September 25, 2026 · 4 min