diff --git a/deploy/helm-chart/templates/deployment.yaml b/deploy/helm-chart/templates/deployment.yaml
index 7312b30..fa44bc1 100644
--- a/deploy/helm-chart/templates/deployment.yaml
+++ b/deploy/helm-chart/templates/deployment.yaml
@@ -48,10 +48,27 @@ spec:
             {{- toYaml .Values.resources | nindent 12 }}
           {{- end }}
           env:
+            # Auth Provider Configuration
+            - name: AUTH_PROVIDER
+              value: {{ .Values.maestro.auth_provider | default "cognito" | quote }}
             - name: AWS_IDENTITY_POOL_ID
               value: {{ .Values.maestro.aws_identity_pool_id }}
             - name: AWS_REGION
               value: "us-east-1"
+            {{- if eq .Values.maestro.auth_provider "keycloak" }}
+            # Keycloak Configuration (when auth_provider=keycloak)
+            - name: KEYCLOAK_URL
+              value: {{ .Values.maestro.keycloak_url | quote }}
+            - name: KEYCLOAK_REALM
+              value: {{ .Values.maestro.keycloak_realm | default "dadosfera" | quote }}
+            - name: KEYCLOAK_CLIENT_ID
+              value: {{ .Values.maestro.keycloak_client_id | quote }}
+            - name: KEYCLOAK_CLIENT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.maestro.keycloak_secret_name | default "maestro-keycloak-credentials" }}
+                  key: client-secret
+            {{- end }}
             - name: BASE_HOST
               value: "maestro_prd"
             - name: BUCKET_CUSTOMER_CSV_ASSETS
diff --git a/deploy/helm-chart/values.yaml b/deploy/helm-chart/values.yaml
index 30af31e..8730481 100644
--- a/deploy/helm-chart/values.yaml
+++ b/deploy/helm-chart/values.yaml
@@ -27,7 +27,14 @@ resources:
     cpu: 2000m
     memory: 2Gi
 maestro:
+  # Auth provider: "cognito" (default) or "keycloak"
+  auth_provider: "cognito"
   aws_identity_pool_id: "us-east-1_Mrezsw9Sn"
+  # Keycloak config (when auth_provider=keycloak)
+  keycloak_url: ""
+  keycloak_realm: "dadosfera"
+  keycloak_client_id: ""
+  keycloak_secret_name: "maestro-keycloak-credentials"
   duc_url: duc.dadosfera.ai
   in_factory_url: in-factory.dadosfera.ai
   bucket_customer_csv_assets: "customers-csv-assets-prd-611330257153"