Compare
Issuerd vs Keycloak
Keycloak is Java/JVM based with broader feature set (SAML, UMA), whereas Issuerd is a lightweight Rust binary without those features.
IssuerdFast, Keycloak-compatible IAM with DPoP and CIBA
KeycloakOpen-source identity and access managementWhich to pick
Pick Issuerd if you want…
- Keycloak-compatible IAM in Rust
- Integrations with PostgreSQL, Redis or LDAP/Active Directory (on Issuerd's list, not Keycloak's)
Pick Keycloak if you want…
- Open-source SSO and auth management
- Keycloak-compatible Rust IAM
- Integrations with OpenID Connect, OAuth 2.0 or SAML 2.0 (on Keycloak's list, not Issuerd's)
Side by side
- What it is
- Issuerd:Issuerd is an open-source, Keycloak-compatible IAM server written in Rust that provides OIDC/OAuth2, DPoP, CIBA and token exchange.
- Keycloak:Keycloak is an open-source identity and access management solution providing SSO, social login, and fine-grained authorization.
- Best for
- Issuerd:Keycloak-compatible IAM in Rust
- Keycloak:Open-source SSO and auth management
- Who it’s for
- Issuerd:Teams needing self-hosted, standards-compliant identity and access management.
- Keycloak:Developers and ops teams needing centralized authentication for apps and services
- Pricing
- Issuerd:Open source
- Keycloak:Open source
- Open source
- Issuerd:Yes, 70 GitHub stars
- Keycloak:Yes, 37,083 GitHub stars
- Works with
- Issuerd:PostgreSQL, Redis, LDAP/Active Directory
- Keycloak:OpenID Connect, OAuth 2.0, SAML 2.0, LDAP, Active Directory
Issuerd features
- OpenID Certified. Provides OpenID Certified support for 11 OP profiles with zero conformance failures.
- Keycloak-compatible API. Implements Keycloak’s domain model and Admin REST API for drop-in compatibility.
- DPoP & Token Exchange. Supports RFC 9449 DPoP sender-constrained tokens and RFC 8693 token exchange for agents.
- CIBA Poll Mode. Enables human-in-the-loop step-up approvals via CIBA poll mode.
- LDAP/AD Federation. Synchronizes users and groups from LDAP/Active Directory with fast import performance.
- Single Binary Deployment. Runs as one self-contained Rust binary with Docker images, no JVM required.
Keycloak features
- Single-Sign-On. Users log in once to access multiple applications without re-authenticating.
- Identity Brokering & Social Login. Add social network or external OpenID Connect/SAML providers via the admin console without code changes.
- User Federation. Connect to existing LDAP or Active Directory directories, or custom user stores.
- Admin & Account Consoles. Central UI for managing apps, users, policies and for users to manage profiles and MFA.
- Authorization Services. Define fine-grained permission policies beyond role-based access.
- Standard Protocol Support. Built-in OpenID Connect, OAuth 2.0 and SAML 2.0 support.
Issuerd vs Keycloak FAQ
Is Issuerd or Keycloak free?+
Yes, both are free and open source.
Is Issuerd or Keycloak open source?+
Yes, both are open source: Issuerd (issuerd/issuerd on GitHub, Apache-2.0 license) and Keycloak (keycloak/keycloak on GitHub, Apache-2.0 license).
Do Issuerd and Keycloak integrate with the same tools?+
Their integration lists don't overlap: Issuerd lists PostgreSQL, Redis and LDAP/Active Directory; Keycloak lists OpenID Connect, OAuth 2.0, SAML 2.0, LDAP and 1 more.
On DevHunt
Based on each tool's website and DevHunt data. Details may change; check the official sites.