Extensions

It is responsible for establishing a connection to provided Keycloak Server, reconciling realms, and clients according to the created CRs

Crossplane provider declaratively configuring Keycloak

Keycloak OpenFGA Event Publisher enables event integration between Keycloak and OpenFGA for Fine-Grained Authorization (FGA) using the OpenFGA SDK.

Python client for Keycloak IAM

This is a Keycloak extension to provide compatibility with macOS Platform Single Sign-on

A Keycloak SPI that publishes events to a MQTT broker.

Keycloak-Extension zur Anbindung des BundID-IdentityProvider (SAML)

A Keycloak provider that enables encryption of user attributes that contain PII data to be automatically encrypted upon storing to database and then decrypted upon loading from database

WS-Federation implementation for keycloak

Keycloak Events To Everywhere is a flexible, high-performance Keycloak extension that streams matched events to various destinations, in various formats.

A PostgreSQL module for OAuth2/Keycloak token validation.

Keycloak-DatastoreProvider storing data in an Apache Cassandra NoSQL-database.

Generate app specific passwords in Keycloak

Easy way how to add Quarkus extensions or any other dependency to your Keycloak deployment

a Keycloak broker mapper that maps a multivalued OIDC claim (e.g.: groups) or SAML attribute (e.g.: groupMembership) into one or more realm and/or client role assignments based on regular expressions

Keycloak-GeoAware is an advanced feature extension for Keycloak that integrates geolocation and device monitoring into the authentication process. This extension utilizes IP-based location and device information to define custom access policies that provide more granular control and additional login security.

A custom Keycloak attribute mapper that fetches a user's SSH keys from the github REST API.

Extension for configuring ORCID as Social Identity Provider in Keycloak

Extension implementing a keycloak Identity Provider that can issue direct (synchronous) SAML requests to external providers, like eHerkenning or DigiD, provided by Statistics Netherlands (CBS).

Keycloak extension for fetching remote data to jwt

Sign in to Keycloak using another device with QR Codes

a Keycloak browser authenticator that enforces an impersonation policy restricting impersonators from accessing service providers (clients) unless holding an associated client role