Listed by DevHunt
Keycloak

Keycloak

Open-source identity and access management

FreeAuthSecurityOpen Source4 impressions

Keycloak - the open source identity and access management solution. Add single-sign-on and authentication to applications and secure services with minimum effort.

Keycloak is a free alternative to Auth0.

Keycloak is an open-source identity and access management solution providing SSO, social login, and fine-grained authorization.

for
Developers and ops teams needing centralized authentication for apps and services
pricing
open source
license
Apache-2.0
keycloak/keycloak 37k 9.0kJavaupdated 2 days ago
works withOpenID ConnectOAuth 2.0SAML 2.0LDAPActive Directory

Key features

6 features of Keycloak
  • Single-Sign-On — Users log in once to access multiple applications without re-authenticating.
  • Identity Brokering & Social Login — Add social network or external OpenID Connect/SAML providers via the admin console without code changes.
  • User Federation — Connect to existing LDAP or Active Directory directories, or custom user stores.
  • Admin & Account Consoles — Central UI for managing apps, users, policies and for users to manage profiles and MFA.
  • Authorization Services — Define fine-grained permission policies beyond role-based access.
  • Standard Protocol Support — Built-in OpenID Connect, OAuth 2.0 and SAML 2.0 support.

Use cases

  • Enable SSO across internal microservices
  • Add social login (Google, Facebook, etc.) to a web app
  • Integrate legacy LDAP users into a modern application
  • Implement fine-grained resource permissions for APIs

Keycloak vs alternatives

KeycloakAuth0WorkOSFirebaseBetter Auth
Best forOpen-source SSO and auth managementManaged SaaS authenticationEnterprise SSO APIsGoogle-centric app authTypeScript-first auth framework
PricingOpen sourceSubscriptionSubscriptionSubscriptionFree
DevHunt upvotes00000
Launched—————
  • Keycloak vs Auth0: Auth0 is a hosted commercial service, while Keycloak is self-hosted open source.
  • Keycloak vs WorkOS: WorkOS focuses on enterprise SSO and directory sync as APIs, Keycloak offers full server and UI.
  • Keycloak vs Firebase: Firebase Auth is a cloud service with tight Google ecosystem integration; Keycloak is platform-agnostic and self-hosted.
  • Keycloak vs Better Auth: Better Auth is a TypeScript library for auth logic; Keycloak provides a complete server and UI solution.

Keycloak FAQ

Do I need to store user credentials myself?+

No, Keycloak handles user storage and authentication, including password policies and MFA.

Can Keycloak work with existing LDAP/Active Directory?+

Yes, it has built-in user federation to connect to LDAP or AD servers.

What protocols does Keycloak support?+

Keycloak supports OpenID Connect, OAuth 2.0 and SAML 2.0.

Is social login possible without code changes?+

Yes, social providers are added through the admin console configuration.

How does Keycloak handle logout across apps?+

It provides single-sign-out so logging out from one app logs the user out of all connected apps.

Summarized by DevHunt from keycloak.org · Oct 1, 2026. Details may change; check the official site.

About this listing

DevHunt lists Keycloak because developers expect to find it next to the tools in its category. It did not launch on DevHunt. Work on Keycloak? Message us to claim this listing.