# Keycloak

Keycloak is an open-source Identity and Access Management platform for adding authentication to self-hosted applications. It is open source and self-hosted, installable on Docker Hub, Kubernetes (Helm), Proxmox, TrueNAS and Unraid.

Canonical page: https://ourlocalhost.com/app/85/keycloak

## Description

Keycloak is an open-source Identity and Access Management platform for adding authentication to self-hosted applications. It lets you secure services and manage user login with minimal effort, removing the need to store users or build custom authentication logic.

## Platform availability

Available on 4 of 9 platforms: Unraid, TrueNAS, Proxmox, Helm.

## Health score

90/100 (Excellent), based on 4 of 4 factors.
- Maintained: 100 (last commit 16 days ago)
- Popular: 91 (37,168 GitHub stars)
- Easy to install: 65 (4 install platforms, install notes, Docker image)
- Light to run: 95 (512 MB minimum RAM, runs on ARM)

## Links

- GitHub: https://github.com/keycloak/keycloak
- Docker Hub: https://hub.docker.com/r/keycloak/keycloak
- Kubernetes (Helm): https://artifacthub.io/packages/helm/bitnami/keycloak
- Proxmox: https://community-scripts.github.io/ProxmoxVE/scripts?id=keycloak
- TrueNAS: https://apps.truenas.com/catalog/keycloak/
- Unraid: https://ca.unraid.net/apps/keycloak-1icqh1a06pwb4y?q=keycloak
- Official website: https://www.keycloak.org/
- Documentation: https://www.keycloak.org/documentation

## Common questions

### Why might the Keycloak Docker image not be on Docker Hub?

The official container image is hosted on Quay rather than Docker Hub. Red Hat, which also develops Keycloak, uses Quay as its open source registry.

### What startup dependencies should I configure if Keycloak runs as a Windows service with an external database?

Add the database and network services to the Windows service dependency list. You can also use delayed automatic start, and after installing run the service start command to begin Keycloak immediately.

### Can Keycloak authenticate users from an existing LDAP or Active Directory server?

Yes, Keycloak has built-in support for connecting to existing LDAP or Active Directory servers. It also allows custom providers for other user stores, such as a relational database.

### Where can I find upgrade instructions for Keycloak?

The official documentation includes an upgrading guide for the Keycloak server and adapters.

## Alternatives

- Auth0: You can connect any application (written in any language or on any stack) to Auth0 and define its Connection, the method used to authentica…
- Authelia: Authelia is an open-source authentication and authorization server that provides login, multi-factor authentication, and single sign-on for…
- Better Auth: Better Auth is a framework-agnostic authentication and authorization library for TypeScript that lives inside your application.
- SuperTokens MySQL: SuperTokens is an open-source, self-hosted user authentication server that adds secure login and session management to your apps.
- Tinyauth: Tinyauth is a lightweight OpenID Connect authentication and authorization server that adds login and access controls to self-hosted apps be…
- VoidAuth: VoidAuth is an open-source authentication platform for self-hosted applications.
- ZITADEL: Zitadel is an open-source identity and access management platform for self-hosted services, teams, and customers.
- authentik: Authentik is an open-source identity provider that adds flexible single sign-on, user management, and common sign-in protocol support to se…
- casdoor: Casdoor is an open-source, self-hosted identity and access management platform that centralizes single sign-on, authentication, and authori…
- openam: OpenAM is an open-source access management platform providing authentication, single sign-on (SSO), and authorisation so users log in once…
- pocket-id: A simple OIDC provider that allows users to authenticate with their passkeys to your services.
- pomerium: Pomerium is an identity-aware reverse proxy that adds authentication and access control to internal web applications, even those without bu…

---
Source: Our Local Host (https://ourlocalhost.com/app/85/keycloak), the self-hosted and open-source app directory.
