Get all the benefits of Keycloak without the complexity
Keycloak is the open-source IAM for login, SSO and MFA over OpenID Connect, OAuth 2.0 and SAML.
Cloud-IAM runs it for you as a managed Keycloak service, so you get every feature below without operating the servers.
Keycloak adaptable by nature
Find your use case, find your way
Centralize employee access for your enterprise
Looking to simplify and centralize access control and manage employee identities across systems? Keycloak is a powerful IAM solution for enterprises, handling user provisioning, authentication, authorization, and lifecycle management.
Manage users on your e-commerce and applications
Keycloak offers advanced CIAM features, perfect for elevating user experiences in B2C settings like e-commerce and mobile apps.
Use existing professional accounts
Keycloak as an IdP broker lets you connect with external identity providers securely, perfect for streamlining B2B access and partner onboarding.
Authentication standards made simple
Keycloak natively provides a wide range of flexible and customizable authentication methods.
Offer simple and secure password authentication, with customizable password policies to fit your needs.
Improve access to your services by allowing users to log in with their existing social media accounts.
Streamline the login experience by leveraging users' existing identities from trusted identity providers.
Customize the authentication journey
Enhance your application's security by adding an extra layer of protection to client accounts.
Protect against brute force attacks with CAPTCHA for secure connections.
Be ready for the authentication future
Ensure a secure login experience with one-time passcodes sent via email or SMS, maintaining user satisfaction and trust.
Simplify the login process with password-free access using secure magic links.
Embracing the passwordless future with Passkeys authentication.
Integration into your stack made effortless
Single Sign-On simplicity and standard protocols
Keycloak natively supports OIDC, OAuth, and SAML, enabling seamless connections to existing apps, websites, and identity federations. These protocols ensure secure and flexible authentication and authorization, while enabling the SSO feature.
OpenID Connect
SAML
OAuth
Seamless integration for existing federations
Leverage Keycloak to simplify the management of your existing user federations and identity providers. Easily import and integrate user databases, LDAP, Microsoft Entra ID (ex Azure AD), and ADFS, preserving established user attributes.
Microsoft Entra ID
ADFS
PostgreSQL
LDAP
Easily access and configure Keycloak like On-Premise
Complete access to the native Keycloak UI admin console
Enjoy the same on-premise UI experience with full control: manage realms, users, and settings through the complete Keycloak Admin Console, without compromises.
Full access to all native Keycloak APIs
Leverage the complete set of Keycloak APIs: authentication, user management, token handling, and more. Integrate seamlessly into your CI/CD pipelines to automate configuration, deployment, and scaling, just like on-premise.
Keycloak's customization isn't just a feature
From adjusting the UI to extending features, customize Keycloak to elevate your experience. Develop or integrate community extensions seamlessly into Keycloak through Cloud-IAM Console without extra cost.
Read our documentation
Keycloak on Github (+20k repositories)
What Cloud-IAM adds on top of Keycloak
Everything above is Keycloak itself. On Cloud-IAM you also get the tooling to run it in production.
Automated, configurable backups and full Keycloak-compatible exports, with your own encryption keys if you want them.
Tested upgrade paths, an automatic backup before each upgrade and one-click rollback.
Upload your own extensions once, pick from our catalog, and pin, upgrade or roll back each one per deployment.
Audit, event, access and server logs, real-time metrics, and an automated scan of your configuration against best practices.
Keycloak in practice
Field notes from the team that runs Keycloak every day.
What is Keycloak?
Keycloak is an open-source identity and access management server. It gives your applications login, single sign-on, multi-factor authentication, social login and user federation with LDAP or Active Directory, using the OpenID Connect, OAuth 2.0 and SAML standards. Red Hat started it in 2014, and it is now a Cloud Native Computing Foundation project.
Is Keycloak free?
Yes. Keycloak is free and open source under the Apache 2.0 license. What costs money is running it in production: servers, a database, high availability, upgrades and someone on call. On Cloud-IAM you can start with the Freemium plan, free for up to 100 users.
Will the Keycloak admin REST APIs remain unchanged?
You get full access to Keycloak's API — just like with an on-premise setup.
What migration path does your team recommend on old Keycloak version?
For your migrations, we recommend checking out our dedicated documentation page — it walks you through everything you need to upgrade to the latest Keycloak version.
What version of Keycloak do you support?
Every new Keycloak release is thoroughly tested by our team before being made available to our clients. We ensure there are no security flaws or regressions, so you always run the latest and most secure stable version (latest version supported).
To see what each release fixes, browse every Keycloak CVE, release by release.
