Keycloak | Awesome Repos

keycloakkeycloak

34,934 stars8,479 forksJavaApache-2.026 viewswww.keycloak.org

Keycloak

Keycloak is an open-source identity and access management server that provides a centralized platform for user authentication, authorization, and identity federation. It functions as a standards-compliant identity provider, utilizing a centralized engine to validate credentials and issue cryptographically signed tokens based on industry-standard protocols like OpenID Connect and SAML. This enables organizations to secure diverse applications and services through a unified authentication layer.

The platform distinguishes itself through its cloud-native orchestration and high-availability capabilities. It utilizes a Kubernetes-native operator and control loop pattern to automate the deployment, scaling, and lifecycle management of identity services within containerized environments. To ensure resilience and continuous uptime, the server employs a distributed data grid that synchronizes session state and cache entries across multiple nodes, preventing service interruptions during hardware or network failures.

Beyond its core identity functions, the system offers a modular plugin architecture that allows developers to extend server functionality through custom interfaces for authentication, storage, and user federation. It also includes a theme engine for server-side template rendering, enabling the customization of login screens and user-facing pages to match specific branding requirements. Administrative tasks, including the management of realms, users, and security policies, can be performed through centralized tools or programmatically via a REST API.

The project provides comprehensive documentation, including guides for server configuration, performance monitoring, and version migration. Installations are supported across various environments, ranging from standalone archives to containerized deployments managed by automated controllers.

Features

Identity Servers - Acts as a centralized platform for user authentication, authorization, and identity federation.
Identity Management Systems - Provides a unified authentication and authorization layer using standard protocols like OpenID Connect and SAML.
Identity Providers - Issues security tokens and manages user sessions across enterprise software environments using standard authentication protocols.
Identity Token Services - Validates credentials and generates cryptographically signed identity tokens based on industry-standard authentication and authorization specifications.
Access Control - Protects digital resources using standard protocols to manage access and verify identity tokens.
Access Control Policies - Implements fine-grained access control and authorization policies centrally to secure applications and services.
Enterprise Authentication - Implements robust login workflows supporting multi-factor authentication and custom branding.
Distributed Data Grids - Synchronizes session state and cache entries across multiple nodes to ensure high availability and failover.
Cloud Native Orchestration - Automates the deployment, scaling, and lifecycle management of services within containerized environments.
Identity Deployment Orchestrators - Install identity and access management servers using standalone archives, container images, or operators designed for container orchestration environments.
Kubernetes Operators - Automates the deployment, scaling, and lifecycle management of services within Kubernetes infrastructure.
Service Deployment - Supports installation and scaling of identity services across physical, virtual, and containerized environments.
Authentication Gateways - Enforces access policies and integrates with external directories to protect digital resources.
Server Administration - Provides centralized administrative tools and interfaces to control runtime settings, user authentication, and security policies.
Identity and Access Providers - Centralized identity and access management with SSO support.
Java Cryptography - Identity and access management for modern applications.
Identity and Access - Robust identity and access management for enterprise applications.
Identity and Access Management - Extensible identity and access management service.
Identity Management - Comprehensive identity and access management solution.
Security And Privacy - Identity and access management for modern apps.
Security & Privacy - Identity and access management.
Single Sign-On - Comprehensive identity and access management solution.
Containerized Deployments - Simplifies configuration and runtime operations by providing container images for identity services.
Control Loops - Continuously monitors the desired state of the cluster to automate deployments and complex lifecycle management tasks.
Deployment Automation - Uses automated controllers to manage installations, updates, and configuration changes in container environments.
High Availability Clusters - Distributes workloads across multiple clusters to maintain service availability during failures.
Resilient Infrastructure - Ensures continuous service uptime by deploying systems across distributed clusters.
Administrative APIs - Allows administrative tasks by sending standard HTTP requests to manage realms, users, clients, and security configurations.
Production Configuration - Defines essential parameters for database, security, and network connectivity in production environments.
Authentication Extensions - Enables the creation of specialized security logic and identity providers for unique application requirements.
Plugin Architectures - Allows developers to extend core server functionality by implementing custom interfaces for authentication and storage.
Configuration Management - Processes environment variables and configuration files to dynamically adjust server settings during startup.
Software Development Kits - Provides server-side interfaces to build custom extensions and specialized components for identity and access management.
Authentication Adapters - Provides client-side adapters to connect web applications to authentication and authorization services.
Performance Monitoring - Monitors performance and health through centralized metrics to identify and resolve bottlenecks.
System Observability - Tracks system health and performance using centralized metrics and tracing tools.
Server-Side Rendering - Dynamically injects branding and localized content into user-facing pages by processing modular templates at runtime.

Open-source alternatives to Keycloak

Similar open-source projects, ranked by how many features they share with Keycloak.

authelia/authelia
authelia/authelia
26,785View on GitHub
Authelia is a centralized identity and access management server designed to secure web applications through unified authentication and authorization. It functions as an identity authority that enables single sign-on across diverse platforms, allowing users to access multiple services with a single set of credentials. By acting as a standards-compliant provider, it facilitates secure identity propagation and token issuance for client applications. The platform distinguishes itself through its ability to integrate directly with web gateways as a reverse proxy authentication middleware, intercep
Go2faauthenticationdocker
View on GitHub26,785
zitadel/zitadel
zitadel/zitadel
13,029View on GitHub
This project is a cloud-native identity and access management platform designed to centralize authentication, authorization, and identity lifecycle management. It functions as a standards-compliant OpenID Connect authorization server, providing secure session management and token issuance for web, mobile, and device-based applications. The platform is built to handle complex identity requirements through stateless token authentication and support for modern passwordless methods, including biometrics and hardware keys. What distinguishes this platform is its native support for multi-tenant env
Go2faauthenticationauthorization
View on GitHub13,029
ory/hydra
ory/hydra
17,236View on GitHub
Hydra is a headless identity server that functions as a certified OAuth2 and OpenID Connect provider. It is designed as an authentication engine that manages authorization handshakes and token lifecycles while remaining decoupled from the user interface. The project distinguishes itself through a headless architecture, allowing external management of login and consent flows. It provides specialized capabilities for dynamic client registration, JSON Web Token issuance, and a system for rotating encryption secrets without service downtime. The system covers a broad range of identity operations
Go
View on GitHub17,236
logto-io/logto
logto-io/logto
12,161View on GitHub
Logto is an open-source identity provider that serves as a centralized authentication and authorization server for web, mobile, and command-line applications. It implements the OpenID Connect and OAuth 2.1 standards to handle secure user sign-in and the issuance of identity tokens. The platform is specifically designed as a multi-tenant authentication framework for software-as-a-service environments, featuring built-in organization management and tenant isolation. It includes an enterprise single sign-on gateway to integrate external identity providers and supports role-based access control t
TypeScriptauthenticationauthorizationemail
View on GitHub12,161

See all 30 alternatives to Keycloak

Keycloak

Features

Open-source alternatives to Keycloak

authelia/authelia

zitadel/zitadel

ory/hydra

logto-io/logto

Star history

Open-source alternatives to Keycloak

authelia/authelia

zitadel/zitadel

ory/hydra

logto-io/logto