Extensions

Crossplane provider declaratively configuring Keycloak

Keycloak OpenFGA Event Publisher enables event integration between Keycloak and OpenFGA for Fine-Grained Authorization (FGA) using the OpenFGA SDK.

Python client for Keycloak IAM

Keycloak module for mapping remote claims

A Keycloak SPI that publishes events to a MQTT broker.

WS-Federation implementation for keycloak

Open-source Helm charts, forged to last. The alternative to Bitnami — official upstream images, Apache 2.0 licensed, Cosign signed.

A Keycloak provider that enables encryption of user attributes that contain PII data to be automatically encrypted upon storing to database and then decrypted upon loading from database

This is a Keycloak extension to provide compatibility with macOS Platform Single Sign-on

Keycloak-Extension zur Anbindung des BundID-IdentityProvider (SAML)

Keycloak Events To Everywhere is a flexible, high-performance Keycloak extension that streams matched events to various destinations, in various formats.

Keycloak-DatastoreProvider storing data in an Apache Cassandra NoSQL-database.

PostgreSQL OAuth Validator for Keycloak

a Keycloak broker mapper that maps a multivalued OIDC claim (e.g.: groups) or SAML attribute (e.g.: groupMembership) into one or more realm and/or client role assignments based on regular expressions

Generate app specific passwords in Keycloak

A custom Keycloak attribute mapper that fetches a user's SSH keys from the github REST API.

Easy way how to add Quarkus extensions to your Keycloak deployment

Keycloak-GeoAware is an advanced feature extension for Keycloak that integrates geolocation and device monitoring into the authentication process. This extension utilizes IP-based location and device information to define custom access policies that provide more granular control and additional login security.

Extension for configuring ORCID as Social Identity Provider in Keycloak

Extension implementing a keycloak Identity Provider that can issue direct (synchronous) SAML requests to external providers, like eHerkenning or DigiD, provided by Statistics Netherlands (CBS).

Keycloak extension for fetching remote data to jwt

a Keycloak browser authenticator that enforces an impersonation policy restricting impersonators from accessing service providers (clients) unless holding an associated client role