Keycloak

Spec sheet

Purpose

Keycloak adds authentication to applications and secure services, so they do not need to store or authenticate users themselves.Read 9 Oct 2026 · keycloak.org

Deployment

The downloads page provides a server distribution, a container image for Docker, Podman, Kubernetes, and OpenShift, and an operator for Kubernetes and OpenShift.Read 9 Oct 2026 · keycloak.org

Support

The project recommends Red Hat build of Keycloak for users who cannot regularly upgrade and need long-term support for specific versions.Read 9 Oct 2026 · keycloak.org

Authentication

Keycloak supports passkeys, passwords, X.509 certificates, and two-factor authentication with recovery codes and TOTP/HOTP.Read 9 Oct 2026 · keycloak.org

Authorization

Administrators can define fine-grained authorization policies for applications and services.Read 9 Oct 2026 · keycloak.org

Feature status

Some features are disabled by default, and the project notes that preview features require enabling and may not be generally available as supported features.Read 9 Oct 2026 · keycloak.org

Identity brokering

Keycloak can authenticate users through external OpenID Connect or SAML identity providers and social networks including Google, GitHub, Facebook, and Twitter.Read 9 Oct 2026 · keycloak.org

Licensing

The Keycloak project is licensed under the Apache License, Version 2.0.Read 9 Oct 2026 · github.com

Project home

Keycloak is an open-source identity and access management project accepted into the CNCF as an incubating project in April 2023.Read 9 Oct 2026 · cncf.io

Protocols

Keycloak supports OpenID Connect, OAuth 2.0, and SAML.Read 9 Oct 2026 · keycloak.org

Security reporting

The project asks vulnerability reporters to email its security team and says it aims to acknowledge reports within seven business days.Read 9 Oct 2026 · keycloak.org

Single sign-on

Users can sign in once through Keycloak to access multiple applications and sign out of them together.Read 9 Oct 2026 · keycloak.org

User federation

Keycloak can synchronize users from LDAP and Active Directory servers and bridge authentication through Kerberos.Read 9 Oct 2026 · keycloak.org

Plans and prices

Every Keycloak plan and price →

Where Specifiction places it

• Self-Service Password Reset Software#6 of 238.0
• Customer Identity and Access Management Software#11 of 298.0
• Passkey Authentication Software#23 of 557.9
• Identity and Access Management Software#20 of 457.9
• Single Sign-On Software#17 of 348.0
• Authentication Software#18 of 317.8
• OAuth Server Software#21 of 327.8