Keycloak

Health v2 · maintenance only

Adoption not part of the score

36431 stars · 8852 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Keycloak is an open-source identity and access management service providing single sign-on, user federation, and fine-grained authorization for modern applications. It supports OpenID Connect, SAML 2.0, social login, and LDAP/Active Directory federation, managed via an admin console.

Use cases

• add single sign-on to my applications
• self-host an identity provider with OIDC and SAML support
• integrate login with Google or other social providers
• federate authentication with LDAP or Active Directory
• centralize user management and authorization policies
• add SSO logout across multiple apps
• secure microservices with token-based authentication

When to choose

• you need centralized SSO across multiple applications
• you want a self-hosted alternative to Auth0 or Okta
• you need OIDC, SAML, and social login behind one console
• you must federate existing LDAP/Active Directory users

When to avoid

• you need only simple session auth in a single small app
• you cannot operate a dedicated Java-based server
• you need a fully managed identity service without infrastructure

Facets

service · maturity stable

auth authorization security http-server self-hosted security backend web-development developer-tools self-hosted jvm self-hosted cross-platform sso oidc saml identity-provider ldap active-directory social-login user-federation cncf single-sign-on docker kubernetes

Member repositories

For agents

markdown · JSON · MCP: product_card(name="keycloak/keycloak")