Keycloak
Open-source identity and access management solution supporting OAuth 2.0, OpenID Connect, SAML 2.0, with SSO, user federation, identity brokering, and fine-grained authorization.
Overview
| Category | Auth |
| Self-Hostable | Yes |
| On-Prem | No |
| Best For | startup, growth, enterprise |
| Last Verified | 2026-02-13 |
Strengths & Weaknesses
Strengths:- customization
- cost
- security
- Requires server management and maintenance
- Steeper learning curve
- Less polished DX than SaaS platforms
When to Use
Best when:- Need self-hosting control
- Want open source without vendor lock-in
- Require extensive protocol support