Keycloak is an open-source identity and access management platform from the CNCF ecosystem. It adds single sign-on, user federation, social login, and fine-grained authorization to applications with admin and account consoles and support for OpenID Connect, OAuth 2.0, and SAML.
Keycloak software is open source and free to download; Red Hat and cloud vendors sell separate supported offerings not priced on keycloak.org.
API access
Documentation covers standard OIDC, OAuth 2.0, and SAML protocols plus authorization services; self-hosted rather than a single vendor cloud API SKU on the homepage.
Is Keycloak right for you?
A good fit for
Platform and application teams that need self-hosted SSO, identity brokering, and centralized user management.
Before you choose
Production hardening, clustering, and enterprise support require your own infrastructure or third-party vendors beyond the upstream downloads page.
Open-source IAM
Keycloak.org presents a full-featured identity provider with SSO, social login, brokering, and authorization services backed by open-source downloads and docs.
What it can do
Features & capabilities
Unknown is different from unavailable. Each fact carries its own evidence.
Capability
Value
Evidence
Checked
Single sign-on
Homepage states users authenticate once with Keycloak to access multiple applications.
Facts sourced
2026-10-04
Standard protocols
Site lists support for OpenID Connect, OAuth 2.0, and SAML.
Facts sourced
2026-10-04
Admin console
Marketing describes a centralized admin console for realms, applications, and authorization policies.
Facts sourced
2026-10-04
Understand the total cost
Keycloak pricing & plans
Free
Free
Keycloak software is open source and free to download; Red Hat and cloud vendors sell separate supported offerings not priced on keycloak.org.
Access
Keycloak software is open source and free to download; Red Hat and cloud vendors sell separate supported offerings not priced on keycloak.org.
Keycloak is an open-source identity and access management platform from the CNCF ecosystem. It adds single sign-on, user federation, social login, and fine-grained authorization to applications with admin and account consoles and support for OpenID Connect, OAuth 2.0, and SAML.
Does Keycloak have a free plan?
Keycloak software is open source and free to download; Red Hat and cloud vendors sell separate supported offerings not priced on keycloak.org.. This record lists ongoing free access; check the plan limits before starting.
How much does Keycloak cost?
No paid monthly price is listed; this record treats the product as free to start. See the plan cards for entitlements, billing commitments and seat minimums.
Can I use Keycloak through an API?
Documentation covers standard OIDC, OAuth 2.0, and SAML protocols plus authorization services; self-hosted rather than a single vendor cloud API SKU on the homepage.. API access and subscription access may have different terms; consult the linked sources.
What should I check before choosing it?
Production hardening, clustering, and enterprise support require your own infrastructure or third-party vendors beyond the upstream downloads page.
Price history
No retained pricing changes yet. A current price alone does not establish a historical trend.