Keycloak

Apache-2.0 CNCF-incubation Java IAM: OIDC, OAuth, SAML, LDAP

Auth / Auth · Apache-2.0 · 37.4k

Reviewed 2026-09-03 · last push 2026-10-21 · repo checked 2026-10-21

What's Good

Apache-2.0. CNCF incubation. OpenID Connect, OAuth 2.0, SAML 2.0, LDAP user federation, identity brokering. Admin console, realms, clients. Self-host is the product.

The Catch

CNCF Java IAM, OIDC+OAuth+SAML+LDAP. Distinct from authentik (MIT-core Python, no hosted hatch, enterprise/ carve-out). You run a JVM and a database. There is no $0 Keycloak Cloud on the project site.

Verdict

Apache-2.0 CNCF IdP. Heavy, complete, self-host. Not authentik.

Embed

Maintainer? Add the badge to your README. It is free, links to this review, and there is no paid version.

Markdown

[![Reviewed on Stack Gems](https://stackgems.com/badge/keycloak.svg)](https://stackgems.com/gems/keycloak)

HTML

<a href="https://stackgems.com/gems/keycloak"><img src="https://stackgems.com/badge/keycloak.svg" alt="Keycloak reviewed on Stack Gems" height="20"></a>

Next.js →

Related