Keycloak
Apache-2.0 CNCF-incubation Java IAM: OIDC, OAuth, SAML, LDAP
Auth / Auth · Apache-2.0 · 36.6k
What's Good
Apache-2.0. CNCF incubation. OpenID Connect, OAuth 2.0, SAML 2.0, LDAP user federation, identity brokering. Admin console, realms, clients. Self-host is the product.
The Catch
CNCF Java IAM, OIDC+OAuth+SAML+LDAP. Distinct from authentik (MIT-core Python, no hosted hatch, enterprise/ carve-out). You run a JVM and a database. There is no $0 Keycloak Cloud on the project site.
Verdict
Apache-2.0 CNCF IdP. Heavy, complete, self-host. Not authentik.
Embed
[](https://stackgems.com/gems/keycloak)