Skip to content
CloudTweaks
Customer Identity (CIAM)

Keycloak

$ BudgetFree · Last reviewed July 2026

Keycloak is the dominant open-source identity and access management server, providing single sign-on, social login, multi-factor authentication, and user federation for both workforce and customer identity. Born at Red Hat and now a CNCF project, it implements OpenID Connect and SAML and is the default self-hosted answer to Auth0-style products. It is entirely free to run, with commercial support available through Red Hat build of Keycloak. It suits teams that want full control of their identity stack without per-user pricing.

open-sourcessooidcsamlcncfself-hosted

Overview

Founded
2014
Pricing tier
Low
Startup-friendly
Yes
Enterprise-ready
Yes

Customer identity

Passwordless
Yes
Social login
Yes
Multi-factor auth
Yes
Free tier
Yes: Fully free OSS (Apache 2.0); Red Hat sells a supported build.
Open-source
Yes
Self-hostable
Yes

Categories & compliance

Categories

Attributes are sourced facts; rankings are derived from them by a transparent scoring engine. “Verified” is a vendor-claimed badge and has no effect on ranking.