Keycloak

Keycloak is an open-source solution for identity and access management (IAM). It enables single sign-on (SSO) across all enterprise applications.

---

Core Concept

Centralisation of user management: Keycloak supports modern protocols such as OpenID Connect (OIDC) and SAML 2.0. It allows integration with external sources (such as Active Directory) and offers features including multi-factor authentication (MFA).

Assessment

• Use case: Central login service for employee portals, customer areas, and API security.
• Advantage: Full control over user data (self-hosted), high security, and highly flexible customisation.
• Limitation: Administration is complex and requires solid knowledge of authentication protocols.

Related Topics

• Compliance
• Security Strategy
• Digital Sovereignty