Open Source Identity and Access Management For Modern Applications and Services
OpenID Connect authentication provider for Home Assistant
Fast, Keycloak-compatible IAM with DPoP and CIBA
🔏 Keycloak theming for the modern web
Zero-Trust access management with true WireGuard® 2FA/MFA
—
Open source Auth0/Keycloak alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps
A curated list of resources for learning about http://www.keycloak.org
Single Sign-On Identity & Access Management via OpenID Connect, OAuth 2, PAM
SirixDB is an an embeddable, bitemporal, append-only database system and event store, storing immutable lightweight snapshots. It keeps the full history of each resource. Every commit stores a space-efficient snapshot through structural sharing. It is log-structured and never overwrites data. SirixDB uses a novel page-level versioning approach.
Enterprise-ready MCP Gateway & Registry that centralizes AI development tools with secure OAuth authentication, dynamic tool discovery, and unified access for both autonomous AI agents and AI coding assistants. Transform scattered MCP server chaos into governed, auditable tool access with Keycloak/Entra integration.
Terraform provider for Keycloak
Container auto-configurations for Spring Boot based integration tests
Easy Keycloak integration for Angular applications.
A curated set of Helm charts brought to you by codecentric
OAuth2 / OIDC for Spring backends of SPAs and mobile apps: the Spring Security beans the official starters leave to you (authorities, CORS, 2xx/401 for fetch, CSRF cookie, validated redirects, logout, one refresh flow at a time), as properties.
Single realm, multi-tenancy for SaaS apps
**CVE-2026-18963** — unauthenticated Keycloak account takeover via the reset-credentials flow.
Exploit for KeyCloak CVE-2026-18963
Open source alternative to Auth0 / Firebase Auth / AWS Cognito