Keycloak
Open source identity and access management solution with single sign-on, social login, user federation, and fine-grained authorization for applications.
Keycloak is a comprehensive open source identity and access management solution that eliminates the complexity of handling user authentication and authorization in your applications. Instead of building custom login systems, developers can integrate Keycloak to handle all identity-related tasks with minimal effort.
Key features include:
- Single Sign-On (SSO) - Users authenticate once and access multiple applications without repeated logins
- Social Login Integration - Easy setup for authentication via Google, Facebook, GitHub, and other social providers
- Identity Brokering - Connect with existing OpenID Connect or SAML 2.0 identity providers
- User Federation - Built-in LDAP and Active Directory support, plus custom provider options
- Fine-grained Authorization - Role-based access control and advanced permission policies
- Standard Protocol Support - OpenID Connect, OAuth 2.0, and SAML 2.0 compliance
The platform provides both an admin console for centralized management of users, applications, and policies, and an account management console where users can update profiles, manage sessions, and configure two-factor authentication.
Keycloak is designed for scalability with clustering support, offers extensive customization through themes and code extensions, and maintains high performance while being lightweight. As a Cloud Native Computing Foundation incubation project, it's actively maintained and enterprise-ready.