Keycloak

Keycloak is an open source identity and access management solution that provides authentication and authorization services for applications and services. The platform enables organizations to add authentication capabilities to their applications without building custom login systems or managing user storage directly.

The solution offers single sign-on (SSO) functionality, allowing users to authenticate once with Keycloak and access multiple applications without repeated login prompts. It also supports single sign-out across all connected applications. Keycloak is built on standard protocols including OpenID Connect, OAuth 2.0, and SAML 2.0.

The platform includes identity brokering capabilities that allow authentication through external identity providers, including social networks and existing OpenID Connect or SAML 2.0 providers. User federation features enable integration with existing LDAP or Active Directory servers, and organizations can implement custom providers for other user stores such as relational databases.

Keycloak provides an admin console for centralized management of authentication policies, identity brokering, user federation, applications, and authorization policies. Users can manage their own accounts through a dedicated account management console, where they can update profiles, change passwords, configure two-factor authentication, and manage sessions.

The platform includes authorization services that go beyond role-based access control, offering fine-grained permission management. Keycloak supports customization through themes, extensibility through code, and includes features for clustering, high performance, and password policy configuration.