Backstage plugins

AuthN and AuthZ with Keycloak

Created by Red Hat

Imports Keycloak realm users and groups into Backstage's catalog via Keycloak API, with scheduled syncs, custom transformers, and OpenTelemetry metrics.

FOSSA

Created by SDA SE

Displays FOSSA code stats and license compliance in Backstage via entity cards and an overview page, linking to FOSSA; supports org and self-hosted.

Kyverno Policy Reports

Created by Terasky

Displays Kyverno policy reports for Backstage components, with error/fail/pass/skip/warn counts and a YAML viewer with copy and download options.

LDAP Auth

Created by ImmobiliareLabs

Adds LDAP login to Backstage with customizable backend and login UI; manages tokens, supports Postgres-backed validation, and pairs with LDAP catalog sync.

OPA Permissions Wrapper

Created by Peter Macdonald

Wraps Backstage's Permission Framework to offload policy decisions to OPA/Rego, enabling dynamic, per-plugin authorization without redeploys.

Policy Reporter

Created by kyverno

Integrates Policy Reporter with Backstage to display Kyverno policy reports for entities and Kubernetes clusters, with optional links to custom docs.

Vault

Created by Spread Group

Lists HashiCorp Vault secrets for a catalog entity, listing items at a path and linking to view/edit in Vault UI with LIST-only access; per-entity engine.