Keycloak

Keycloak is an open source identity and access management server that adds authentication and authorization to applications and services without requiring each application to store or authenticate users. Key capabilities described: - Single sign-on and single sign-out across applications that use Keycloak - Identity brokering and social login, configured through the admin console, including authentication against existing OpenID Connect or SAML 2.0 identity providers - User federation with LDAP and Active Directory servers, with support for custom providers for other user stores such as relational databases - Admin console for centrally managing the server, identity brokering, user federation, applications, services, users, permissions, and sessions - Account management console where users update profiles, change passwords, set up two-factor authentication, manage sessions, view account history, and link accounts with additional providers - Support for standard protocols: OpenID Connect, OAuth 2.0, and SAML - Fine-grained authorization services, with policies managed from the admin console, for cases where role-based authorization is insufficient