{"id":"keycloak","name":"Keycloak","tagline":"The heavyweight open-source identity server.","description":"Red Hat's identity and access management: every protocol, every feature, a Java footprint.","website":"https://www.keycloak.org","source":"https://github.com/keycloak/keycloak","license":"Apache-2.0","self_hostable":true,"vendor":{"id":"red-hat","name":"Red Hat","country":"US","parent":"ibm","kind":"company","url":"https://www.redhat.com","european":false},"needs":["identity-sso"],"replaces":["okta"],"offerings":[{"mode":"self-host","price":{"basis":"free"}}],"resources":{"ram_mb":1024,"cpu":1,"disk_gb":2,"basis":"small deployment: a household or a team of up to ~20 people"},"ash":null,"kind":"software","provenance":{"source":"curated","verified":"2026-09-04"},"open_source":true,"data_classes":["credentials","employee-personal"],"modes":["sh"],"verdicts":{"sh":{"verdict":"green","rule":1,"reason":"You run it yourself: no data leaves your own infrastructure."}},"upstream":null,"needs_expanded":[{"id":"identity-sso","name":"Sign-in & identity","data_classes":["credentials","employee-personal"]}],"page":"/tools/keycloak"}