# Keycloak

> Keycloak is a free, open-source app you can self-host in the identity & SSO category. Open-source identity and access management with SSO, OIDC, SAML and user federation. It has 37,156 GitHub stars, is released under the Apache-2.0 license and ships a Docker image. It is a self-hosted alternative to Auth0 and Okta.

## Key facts

| Fact | Value |
|---|---|
| Repository | https://github.com/keycloak/keycloak |
| Website | https://www.keycloak.org/ |
| GitHub stars | 37,156 |
| Forks | 9,012 |
| Open issues | 2,709 |
| License | Apache-2.0 |
| License type | Open source |
| Language | Java |
| Docker image | Yes |
| Platforms | Java, Docker |
| Categories | Identity & SSO |
| Commits, last 12 months | 3,157 |
| Last commit | Oct 6, 2026 |
| Latest release | 26.8.0 (Oct 1, 2026) |
| Created | Jul 2, 2013 |
| Maintenance | Actively maintained |
| Archived | No |

Topics: keycloak, oidc, saml

## Install

Keycloak ships a Docker image; follow the README at https://github.com/keycloak/keycloak for the image name and environment variables.

Need it installed for you? [appsgit installation help](https://appsgit.com/services/install): a fixed quote by email, single app installs from $79.

## Keycloak replaces

- [Auth0 alternatives](https://appsgit.com/alternatives/auth0): An identity platform offering login, single sign-on and user management as a service.
- [Okta alternatives](https://appsgit.com/alternatives/okta): An enterprise identity and single sign-on provider.

## Comparisons

- [Keycloak vs authentik](https://appsgit.com/compare/keycloak-vs-authentik): Pick Keycloak for an enterprise-grade, Apache-licensed identity server with deep standards support; pick authentik for a friendlier UI, visual flows and a built-in proxy for homelab apps.

## Similar apps in Identity & SSO

- [Authelia](https://appsgit.com/apps/authelia): Single sign-on and two-factor authentication portal for protecting web apps behind a reverse proxy. (29,182 stars, Apache-2.0, Go, Docker)
- [authentik](https://appsgit.com/apps/authentik): Flexible identity provider and SSO platform with OAuth2, SAML, LDAP and proxy outposts. (25,859 stars, MIT, Python, Docker)
- [SuperTokens](https://appsgit.com/apps/supertokens): Open-source authentication with login, sessions and social sign-in for your own app. (15,335 stars, Apache-2.0, Java, Docker)
- [ZITADEL](https://appsgit.com/apps/zitadel): Identity infrastructure with SSO, passkeys, multi-tenancy and audit trails, built in Go. (15,213 stars, AGPL-3.0, Go, Docker)
- [Logto](https://appsgit.com/apps/logto): Modern auth infrastructure with OIDC, SSO and multi-tenant support for SaaS and apps. (14,652 stars, MPL-2.0, TypeScript, Docker)
- [Casdoor](https://appsgit.com/apps/casdoor): UI-first identity and access management platform supporting OAuth, OIDC, SAML and LDAP. (14,515 stars, Apache-2.0, Go, Docker)
- [Ory Kratos](https://appsgit.com/apps/ory-kratos): Headless identity and user management API with login, registration and account recovery. (13,909 stars, Apache-2.0, Go, Docker)
- [Dex](https://appsgit.com/apps/dex): Federated OpenID Connect provider that connects to LDAP, SAML and OAuth upstream identities. (11,157 stars, Apache-2.0, Go, Docker)

---

Canonical page: https://appsgit.com/apps/keycloak
Source: appsgit (https://appsgit.com), the app store for github. Data from the GitHub API, refreshed nightly.
Machine access: JSON API https://appsgit.com/api/v1/apps (OpenAPI: https://appsgit.com/openapi.json), MCP server https://mcp.appsgit.com/mcp, full index https://appsgit.com/llms-full.txt.