Keycloak
A widely used open-source IAM platform, backed by Red Hat
ToolIdentity & Access ManagementSelf-hosted, Open source
Pricing: Free (open source) / Red Hat Build of Keycloak via subscription
Reviewed by the Cyber Vendor Guide editorial team against the public sources cited below · Last reviewed February 2026 · How we review listings
What is Keycloak?
Keycloak is the open-source identity and access management platform backed by Red Hat. It provides SSO, federation, identity brokering, and social login for modern applications and services. Keycloak is the upstream project for Red Hat Build of Keycloak (the commercially supported version) and is widely deployed in both enterprise and community settings where full control over the identity stack is required.
Best for: Teams that need full control, auditability, and zero license cost
Pros
- Free, fully open source, self-hosted forever
- Rich feature set comparable to commercial platforms
- Strong federation with LDAP and Active Directory
- Large community and extensive extension ecosystem
Things to check
- Operational overhead of running it yourself
- Admin UI is functional but less modern
- Requires expertise to deploy for high availability
- Upgrades between major versions can be time-consuming
Reported in public reviews and vendor documentation. See sources below.
Key Features
Do you work at Keycloak? to confirm the details or send us a correction.
Add the Cyber Vendor Guide badge to your site
Keycloak Comparisons
Sources & references
Where the information on this listing comes from. Always verify pricing and capabilities against the vendor before a purchasing decision.
Spot an error, or do you represent Keycloak? Request a correction.
Key facts
- Pricing
- Free (open source) / Red Hat Build of Keycloak via subscription
- Model
- Open Source + Enterprise Subscription
- Founded
- 2014
- Cloud
- No
- Self-hosted
- Yes
- Open source
- Yes
Keycloak Alternatives
- Auth0Developer-first CIAM with SDKs and docs...
- Okta Workforce IdentityCloud IAM with the broadest integration catalog...
- Ping IdentityEnterprise-grade IAM with hybrid deployment and strong feder...
- Microsoft Entra IDMicrosoft's cloud IAM, bundled with M365 and Azure...