Keycloak
Open source identity and access management solution with single sign-on, OAuth2 and OpenID Connect support.
- Actively maintained
- Foundation-backed
- Well documented
- Permissive license
Overview
Keycloak is an open-source identity and access management (IAM) server that centralizes authentication and authorization so individual applications don't need to implement their own user storage or login logic. It provides user federation (connecting to existing user directories), single sign-on, strong/multi-factor authentication, self-service user management, and fine-grained authorization policies.
It runs as a standalone server - via a downloadable distribution or the official Docker image - that applications talk to using standard protocols (OAuth 2.0, OpenID Connect), rather than being embedded as a library inside each app. Keycloak is a Cloud Native Computing Foundation (CNCF) project.
It's a fit for teams that want one central authentication/authorization service in front of multiple applications or services, instead of building and maintaining login and user-management logic separately in each one.
Why it's in this catalog
Catalog rating: ★★★★★ (5/5)
The leading full-featured open-source identity and access management server; essential representative project.
- Foundational
- Foundation-governed
- Categories
- Authentication & Security
- Languages
- Java
- License
- Apache-2.0
Related Projects
Zitadel
AGPL-3.0Cloud-native identity and access management platform with multi-tenancy, SSO, MFA, and OIDC/SAML support, usable self-hosted or as a managed service.
Actively maintained
- Authentication & Security
Auth.js
ISCOpen-source authentication library built on standard Web APIs, supporting OAuth, email/passwordless and credential-based sign-in for any JavaScript framework or runtime.
Well documented
- Authentication & Security
Authelia
Apache-2.0Self-hosted single sign-on and two-factor authentication portal that sits in front of your reverse proxy to protect existing web apps.
Actively maintained
- Authentication & Security
Supabase
Apache-2.0Open source Firebase alternative providing a Postgres database, authentication, instant APIs, edge functions, realtime subscriptions and storage.
Actively maintained
- Backend
- Database
- Authentication & Security
Spotted an error? Suggest an edit on GitHub.