On 12/03/17 19:13, Known Michael wrote: Not sure I understand fully, but if your authenticator configuration is stored in database or in properties file, then you can just add 1 property and/or 2 properties to your authenticator in Keycloak. And that will be "databaseURL" and/or "propertiesFile" . You may not even need any property as long as your DB and/or property file is at some known location and can be hardcoded in your implementation. For example, if your properties file is in "/foo/my-authenticator.properties", then your Authenticator implementation can just read the configuration from this property file. And if you change something in this property file, then both KC authenticator instances for "Browser" and "directGrant" will be immediately able to see that change. Marek