Keycloak
Open-source identity and access management for modern apps
Keycloak is an enterprise-grade identity and access management solution backed by Red Hat. It provides single sign-on, identity brokering, social login and fine-grained authorization for applications and services.
Key features
- SSO with OpenID Connect and SAML 2.0
- Identity brokering and social login
- User federation with LDAP and Active Directory
- Fine-grained authorization services
Pros & cons
Strengths
- Mature and battle-tested
- Strong enterprise feature set
Trade-offs
- Steep learning curve
- Resource intensive
Keycloak replaces
Compare Keycloak
60 head-to-head comparisons.
- Keycloak vs Authelia
- Keycloak vs authentik
- Keycloak vs Casbin
- Keycloak vs Ory Hydra
- Keycloak vs SuperTokens
- Keycloak vs ZITADEL
- Keycloak vs Logto
- Keycloak vs Casdoor
- Keycloak vs Ory Kratos
- Keycloak vs Open Policy Agent
- Keycloak vs Apereo CAS
- Keycloak vs Dex
- Keycloak vs Hanko
- Keycloak vs Pocket ID
- Keycloak vs step-ca
- Keycloak vs SpiceDB
- Keycloak vs LLDAP
- Keycloak vs Permify
- Keycloak vs OpenFGA
- Keycloak vs Ory Keto
- Keycloak vs Kanidm
- Keycloak vs Cerbos
- Keycloak vs 2FAuth
- Keycloak vs Boundary
- Keycloak vs node-oidc-provider
- Keycloak vs Ory Oathkeeper
- Keycloak vs Vouch Proxy
- Keycloak vs Buzzfeed sso
- Keycloak vs GLAuth
- Keycloak vs Keywhiz
- Keycloak vs FreeRADIUS
- Keycloak vs Supabase Auth
- Keycloak vs Traefik Forward Auth
- Keycloak vs SAML Jackson
- Keycloak vs Caddy Security
- Keycloak vs Authorizer
- Keycloak vs Authgear
- Keycloak vs privacyIDEA
- Keycloak vs Topaz
- Keycloak vs Warrant
- Keycloak vs Rauthy
- Keycloak vs FreeIPA
- Keycloak vs SimpleSAMLphp
- Keycloak vs Samba Active Directory DC
- Keycloak vs Zentral
- Keycloak vs WSO2 Identity Server
- Keycloak vs Janssen Project
- Keycloak vs midPoint
- Keycloak vs LDAP Account Manager
- Keycloak vs OpenLDAP
- Keycloak vs Apache Syncope
- Keycloak vs Univention Corporate Server
- Keycloak vs FusionAuth
- Keycloak vs Shibboleth Identity Provider
- Keycloak vs OpenUnison
- Keycloak vs ZITADEL Login UI
- Keycloak vs LemonLDAP::NG
- Keycloak vs Ipsilon
- Keycloak vs Gluu Flex
- Keycloak vs Hello Identity Coop
Similar identity & sso apps
Casbin
Identity & SSOAuthorization library supporting many access control models
Replaces Auth0 RBAC
Ory Hydra
Identity & SSOCertified OAuth 2.0 and OpenID Connect server
Replaces Okta, Auth0
SuperTokens
Identity & SSOOpen-source user authentication you can self-host
Replaces Auth0, Firebase Auth
ZITADEL
Identity & SSOCloud-native identity infrastructure with multi-tenancy built in
Replaces Auth0, Okta
Logto
Identity & SSODeveloper-friendly authentication and authorization platform
Replaces Auth0, Firebase Auth
Casdoor
Identity & SSOUI-first identity and access management with SSO support
Replaces Auth0, Okta