Configuration Details relevant for Integration of Graph Modeling Authentication with GraphDB

23/04/2026

Here you will find configuration details when integrating Graph Modeling OAuth2 Authentication with GraphDB.

Note

In our example we are using the ppt client, i.e. Graph Modeling client.

The following settings have to be configured in GraphDB to enable OpenID Connect and OAuth2 authentication:

Configuration Key	Value	Notes
`security.enabled`	`true`	Enables security for GraphDB
`graphdb.auth.methods`	`openid`	Enables OpenID Connect authentication
`graphdb.auth.database`	`oauth`	Specifies the authentication database
`graphdb.auth.openid.issuer`	`http://keycloak:8181/auth/realms/poolparty`	Keycloak realm issuer URL with `poolparty` being the default value
`graphdb.auth.openid.client_id`	`graphdb`	The Keycloak client ID defined for GraphDB
`graphdb.auth.openid.token_type`	`access`	Specifies the token type for authentication
`graphdb.auth.openid.username_claim`	`preferred_username`	Specifies the claim to use for the username
`graphdb.auth.openid.auth_flow`	`code`	Specifies the OAuth2 flow to use
`graphdb.auth.openid.token_audience`	`graphdb`	Must match the client specified by `poolparty.graphdb.oauth.clientId`
`graphdb.auth.openid.require_audience`	`true`	Ensures the audience claim is required
`graphdb.auth.oauth.roles_claim`	`resource_access.graphdb.roles`	The claim path containing the roles; here `graphdb` must match the `poolparty.graphdb.oauth.clientId`
`graphdb.auth.oauth.default_roles`	`ROLE_USER`	The default role assigned if no roles are found in the claim; does not grant access to any of the repositories/data

The following configurations must be set in the application's configuration file to activate the new OAuth2 functionality.

The minimum required configuration to enable the functionality is poolparty.graphdb.oauth.clientId set using the the client ID representing GraphDB.

Configuration Key	Description	Default Value	Required to Enable
`poolparty.graphdb.oauth.clientId`	GraphDB OAuth2 client ID		Yes
`poolparty.graphdb.oauth.method`	GraphDB OAuth2 method; allowed values are `client_secret_basic`, `client_secret_post`	`client_secret_basic`	No
`poolparty.graphdb.oauth.scopes`	GraphDB OAuth2 scopes; it is a comma-separated list of scopes	`openid,profile,roles`	No

Tip

More details on the OAuth2 authentication integration can be found in the Graph Modeling OAuth2 Authentication Integration with GraphDB section.

In this section: