Extensions

It is responsible for establishing a connection to provided Keycloak Server, reconciling realms, and clients according to the created CRs

Crossplane provider declaratively configuring Keycloak

Open-source Helm charts, forged to last. The alternative to Bitnami — official upstream images, Apache 2.0 licensed, Cosign signed.

Keycloak OpenFGA Event Publisher enables event integration between Keycloak and OpenFGA for Fine-Grained Authorization (FGA) using the OpenFGA SDK.

Python client for Keycloak IAM

A Keycloak SPI that publishes events to a MQTT broker.

This is a Keycloak extension to provide compatibility with macOS Platform Single Sign-on

A Keycloak provider that enables encryption of user attributes that contain PII data to be automatically encrypted upon storing to database and then decrypted upon loading from database

Keycloak-Extension zur Anbindung des BundID-IdentityProvider (SAML)

WS-Federation implementation for keycloak

Keycloak Events To Everywhere is a flexible, high-performance Keycloak extension that streams matched events to various destinations, in various formats.

Keycloak-DatastoreProvider storing data in an Apache Cassandra NoSQL-database.

A PostgreSQL module for OAuth2/Keycloak token validation.

Easy way how to add Quarkus extensions to your Keycloak deployment

a Keycloak broker mapper that maps a multivalued OIDC claim (e.g.: groups) or SAML attribute (e.g.: groupMembership) into one or more realm and/or client role assignments based on regular expressions

Generate app specific passwords in Keycloak

Keycloak-GeoAware is an advanced feature extension for Keycloak that integrates geolocation and device monitoring into the authentication process. This extension utilizes IP-based location and device information to define custom access policies that provide more granular control and additional login security.

A custom Keycloak attribute mapper that fetches a user's SSH keys from the github REST API.

Extension for configuring ORCID as Social Identity Provider in Keycloak

Extension implementing a keycloak Identity Provider that can issue direct (synchronous) SAML requests to external providers, like eHerkenning or DigiD, provided by Statistics Netherlands (CBS).

Keycloak extension for fetching remote data to jwt

a Keycloak browser authenticator that enforces an impersonation policy restricting impersonators from accessing service providers (clients) unless holding an associated client role

This Keycloak extension helps secure your Keycloak authentication by blocking disposable email addresses during registration.