The scenario is, I want to manage authentication in several REST APIs deployed in different environments.
I've been reading about the Vault, and apparently, it has this feature.
With Vault is possible that my application only needs to make a request to the vault and be able to authenticate to an external API (properly configured) using only the alias? Without the need to store on my application user/password/token of the external API?
I wonder if anyone has had experience using Vault this way, and what are the pros and cons
Or if someone recommends something else to achieve this
UPDATE:
I found a question like I was looking for on SO https://stackoverflow.com/questions/57703943/how-to-allow-single-sign-on-for-al-clients-in-keycloak