| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 3 |
| Spec score · Customer Identity and Access Management Software | 8.0 (#11) | 7.7 (#14) |
| Authentication | Keycloak supports passkeys, passwords, X.509 certificates, and two-factor authentication with recovery codes and TOTP/HOTP. | It supports OAuth 2.1, OpenID Connect, SAML 2.0, FIDO2/WebAuthn passkeys, magic links, email and SMS OTP, and push approval. |
| Deployment | The downloads page provides a server distribution, a container image for Docker, Podman, Kubernetes, and OpenShift, and an operator for Kubernetes and OpenShift. | Self-hosted deployments can use Docker, Helm, or Kubernetes, run on Postgres, and support air-gapped environments. |
| Support | The project recommends Red Hat build of Keycloak for users who cannot regularly upgrade and need long-term support for specific versions. | Community support is provided through Discord and GitHub; Cloud lists email and chat support, while Enterprise lists priority SLA and 24/7 support. |
