Apache Hive : Setting Up OAuth 2 with Keycloak Keycloak Settings 1. Register Hive Metastore as a Resource Server Browse Manage -> Clients -> Create client, and create a client for HMS, as an OAuth 2 resource server. This example useshive-metastore as a client ID. You can access the client secret in the Credentials tab. 2. Define the “catalog” scope Iceberg REST Catalog uses “catalog” as the default scope name.