keycloak

Open Source Identity and Access Management For Modern Applications and Services

34.5k stars8.4k forks396 watchers2470 open issuesJavaApache-2.0

EDITOR'S TAKE

Enterprise auth/IAM platform. ~24k stars. Java-based, self-hosted, supports SAML, OIDC, fine-grained authorization. Heavy to operate but the right pick for compliance-heavy enterprise apps.

Use this if

You are doing enterprise SSO with SAML/OIDC and need self-hosting for compliance reasons.

Skip if

You are a small team or a B2C product — way too much complexity.