Keycloak

Keycloak is an open source identity and access management solution that adds authentication to applications and secures services without requiring applications to store users or handle authentication themselves. Users authenticate with Keycloak rather than individual applications, and single sign-out logs users out of all applications using Keycloak at once.

Keycloak supports OpenID Connect, OAuth 2.0, and SAML 2.0, with adapters for securing applications and services. It includes an admin console for managing features, identity brokering, user federation, applications, services, authorization policies, users, permissions, and sessions, plus an account management console where users update profiles, change passwords, set up two-factor authentication, manage sessions, view history, and link additional identity providers. Identity brokering and social login can be configured through the admin console without code changes, and user federation connects to LDAP or Active Directory, with custom providers supported for other stores. Fine-grained authorization services complement role-based authorization. Keycloak also offers clustering, themes, extensibility, and password policies.

Keycloak is distributed as open source software under a Cloud Native Computing Foundation incubation project, with downloads and documentation available from the project.