Kafka authentication guide - Maia Documentation

This is a step-by-step guide to acquiring credentials for authorizing the Kafka connector using an OAuth 2.0 client credentials connection to Kafka or Kafka Confluent Cloud.

Prerequisites

You need an OAuth 2.0 authorization server from an identity provider—such as Auth0, Keycloak, Okta, OneLogin, or OpenID—to create an app to acquire your client ID, client secret, access token URL, and scopes. Consult the documentation for your identity provider to learn how to create an app and to acquire credentials.

Add a Kafka OAuth connection

In the left navigation, click .
Click the Connections tab, and then click Add connection.
Search for and click Kafka or Kafka Confluent Cloud, depending on your setup.

Complete the fields using the reference table below.

Field	Description
Name	A unique, descriptive name for your new Kafka OAuth connection.
Authentication Type	Choose `OAuth 2.0 Client Credentials`.
Client ID	The client ID of your app created in your identity provider.
Client Secret	The client secret of your app created in your identity provider.
Access Token URL	The access token URL from your identity provider.
Scope	The name of a scope set up in your identity provider. Scopes define and limit the permissions granted to a client application.
Cluster ID	Kafka Confluent Cloud only. The cluster ID of the Confluent component you’re connecting to. Read View a cluster ID for more information.
Identity Pool ID	Kafka Confluent Cloud only. The name of your identity pool. Read Add an identity pool for more information.

Click Authorize.
A new browser tab will open, connecting you to the identity provider. Upon successful connection and authorization, this browser tab will close.
The OAuth connections menu will now display your new OAuth connection.

Your new OAuth connection is ready for use with the Kafka connector.