Sign inCreate account
Sign inCreate account

keycloak

From public sources

Keycloak is an open-source identity and access management library and server for adding SSO, OIDC, SAML and authorization to applications and services.

LibraryCategory: Security ToolsOpen sourcedata checked Oct 15, 2026
Add to compareAdd to collection

Overview

Building login, user storage and access control into every application is slow and risky. Keycloak handles authentication and identity management so your applications do not have to store users or verify credentials themselves. Keycloak provides user federation, strong authentication, user management and fine-grained authorization. It supports standard protocols such as OpenID Connect and SAML for single sign-on, and it can be started as a development server from the distribution or run with Docker. Keycloak is released under the Apache License 2.0 and is aimed at developers and operators who need self-hosted identity and access management for modern web, mobile and backend services.
  • identity
  • keycloak
  • oidc
  • password-manager
  • saml
  • sso

Installation

Commands are shown, never run by the marketplace. Check them against the official documentation.

Compatibility

Unknown means no evidence was found — not that the product is incompatible.
PlatformStatusArchitectureEvidenceConfidence
Node.jsUnknown———
PythonUnknown———
JVMUnknown———
.NETUnknown———
WebAssemblyUnknown———
Web browserUnknown———
Server / self-hostedCompatible—Declared on the card—

Releases

checked Oct 29, 2026
v26.8.1LatestOct 13, 2026Official source ↗

Files in 26.8.1

The marketplace does not host these files: downloads go to the official source. Files have not been scanned by us.
FilePlatformSizeSHA-256Download from the official source
keycloak-26.8.1.tar.gzUnknown165.9 MB4e2740b181fa…Official source ↗
keycloak-26.8.1.zipUnknown166.1 MB4cd312c889af…Official source ↗
keycloak-account-ui-26.8.1.tgzUnknown772.5 KB5d6aa1eb2d18…Official source ↗
keycloak-admin-client-26.8.1.tgzUnknown79.2 KB944c8f9d3068…Official source ↗
keycloak-admin-ui-26.8.1.tgzUnknown3.6 MB7db62ec2c0d1…Official source ↗
keycloak-api-docs-26.8.1.zipUnknown32.8 MBb8503f14bb37…Official source ↗
keycloak-documentation-26.8.1.zipUnknown28.9 MBddfc43145f7d…Official source ↗
keycloak-ui-shared-26.8.1.tgzUnknown86.3 KB7173800f9ee3…Official source ↗
keycloak-26.8.1.tar.gz.md5checksums32 Ba44d1b0b9468…Official source ↗
keycloak-26.8.1.zip.md5checksums32 Be1dde34b6c7c…Official source ↗
keycloak-api-docs-26.8.1.zip.md5checksums32 Bf07b2cdb96a3…Official source ↗
keycloak-documentation-26.8.1.zip.md5checksums32 B37026bdfb450…Official source ↗
keycloak-26.8.1.tar.gz.sha1other40 B844f9c5ee7b3…Official source ↗
keycloak-26.8.1.zip.sha1other40 Bb7e2b5550fc3…Official source ↗
keycloak-api-docs-26.8.1.zip.sha1other40 B3ec96fb8fbca…Official source ↗
keycloak-documentation-26.8.1.zip.sha1other40 Ba46b747fd1aa…Official source ↗
third-party-notice-keycloak.htmlother7.2 MB14c17647c43f…Official source ↗
keycloak-26.8.1.tar.gz.ascsignature228 B95a1a9aac6e7…Official source ↗
keycloak-26.8.1.zip.ascsignature228 B9b6c1c74e770…Official source ↗
keycloak-api-docs-26.8.1.zip.ascsignature228 B06dc438dbaf1…Official source ↗
keycloak-documentation-26.8.1.zip.ascsignature228 B3b16764010ba…Official source ↗

Release history

Quality profile

algorithm quality-v1.0 · assessed Oct 15, 2026
Quality Score96
Risk Score0
Confidence 1.00
Quality Score and Risk Score are different measures. A high score does not guarantee safety.

Score components

Maintenance · 2020
last activity 0 days ago
Documentation · 1515
README 4410 chars, description present
Ready to use · 1515
install instructions: yes; releases: yes
Metadata · 1010
4/4 of description, homepage, license, topics
Releases · 106
10 release(s), latest 1480 days ago
Category confidence · 1010
classifier confidence 1
Adoption · 1010
37379 stars (log-dampened, 10k = max)
License clarity · 55
SPDX Apache-2.0
Community · 55
issues enabled, 9058 forks

License

Apache-2.0
Known licensefrom the repository host

This is the catalog policy status, not legal advice.

Sources

github.com/keycloak/keycloakPrimary★ 37,379 starslast activity Oct 15, 2026Primary repository · Confidence 1.00

Reviews

Sign in to write a review

No reviews yet.

Alternatives

authentikSimilar
authentik is an open-source identity provider for single sign-on, supporting SAML, OAuth2/OIDC, LDAP and RADIUS, for self-hosted setups from small labs to large clusters.Security Tools
vaultwardenSimilar
Vaultwarden is an unofficial, Bitwarden-compatible password manager server written in Rust, for self-hosted deployments with lower resource use.AGPL-3.0 · Security Tools
trivySimilar
Trivy is an open-source security scanner that finds vulnerabilities, misconfigurations, secrets and SBOMs in container images, filesystems, Git repositories and Kubernetes.Apache-2.0 · Security Tools
semgrepSimilar
Semgrep is an open-source static analysis (SAST) tool that finds bugs, security vulnerabilities and coding-standard violations using code-like patterns across 30+ languages.LGPL-2.1 · Security Tools
juice-shopSimilar
OWASP Juice Shop is an intentionally insecure web application for security training, CTF challenges and testing security tools, covering the OWASP Top Ten.MIT · Security Tools

README

From keycloak/keycloak · license Apache-2.0 · fetched Oct 29, 2026

[Keycloak]

[GitHub Release] [OpenSSF Best Practices] [CLOMonitor] [OpenSSF Scorecard] [Artifact Hub] [GitHub Repo stars] [GitHub commit activity] [Translation status]

Open Source Identity and Access Management

Add authentication to applications and secure services with minimum effort. No need to deal with storing users or authenticating users.

Keycloak provides user federation, strong authentication, user management, fine-grained authorization, and more.

Help and Documentation

Reporting Security Vulnerabilities

If you have found a security vulnerability, please look at the instructions on how to properly report it.

Reporting an issue

If you believe you have discovered a defect in Keycloak, please open an issue. Please remember to provide a good summary, description as well as steps to reproduce the issue.

Getting started

To run Keycloak, download the distribution from our website. Unzip and run:

bin/kc.[sh|bat] start-dev

Alternatively, you can use the Docker image by running:

docker run quay.io/keycloak/keycloak start-dev

For more details refer to the Keycloak Documentation.

Building from Source

To build from source, refer to the building and working with the code base guide.

Testing

To run tests, refer to the running tests guide.

Writing Tests

To write tests, refer to the writing tests guide.

Contributing

Before contributing to Keycloak, please read our contributing guidelines. Participation in the Keycloak project is governed by the CNCF Code of Conduct.

Joining a community meeting is a great way to get involved and help shape the future of Keycloak.

Code of Conduct

We are committed to providing a safe, welcoming, and constructive environment for all Keycloak contributors and users. To protect this space, we actively enforce our Code of Conduct. If you wish to report an incident or appeal a moderation decision, please email keycloak-coc@googlegroups.com.

Other Keycloak Projects

License

Open the repository ↗