Keycloak

Keycloak is an open-source identity and access management server for single sign-on, user federation, identity brokering and fine-grained authorization. The project began in 2014 as a product of Red Hat's WildFly team and has been an incubating project of the Cloud Native Computing Foundation (Linux Foundation) since April 2023. It is licensed under Apache 2.0. There is no European company behind it, so the listing rests on the open-source exception: anyone can run Keycloak on their own servers in Europe.

Features

• Single sign-on with OpenID Connect, OAuth 2.0 and SAML 2.0
• User federation with LDAP and Active Directory, social login and identity brokering to other OpenID Connect or SAML providers
• Admin console and account console, configurable password policies, multi-factor authentication and passkeys (WebAuthn)
• Fine-grained authorization services, themes for custom login pages, extensions through code, clustering for high availability

Operation and limits

Keycloak is free software, but the operator runs, updates and secures it. Teams without that capacity can buy a supported build from Red Hat or use a Keycloak hosting partner. The Keycloak project does not offer a hosted service of its own. Compared with newer products, setup and customisation require more Java and infrastructure knowledge.