Keycloak Pros and Cons

Keycloak is a tool which used for authentication and authorization management of your application, this tools is so widely used in the industry for application safety and role based access control. Keycloak is easily integrated with the tools and its very handy to use. Review collected by and hosted on G2.com.

According to my experience there is nothing to dislike. Review collected by and hosted on G2.com.

i like the way we can customise it according to our ease and requirements. with the single sign in only we can get the acces of all the applications running on the keyclaok we need not to login for each application individually.the apis are opensource and freely available with its user interface to navigate through all the roles, groups and users. i am currently using it in my application as a tool for giving the screen level access to the users based on their attributes and roles assigned to them. it handles everything perfectly and never goes down.its secure and provides token based authentication and authorisation to the applicantion with which it has integrated.i am currently using it with spring boot which is basically the java based framework and it works smoothly and perfectl and l like to use it instead of java authentication and authorisation techniques becaue its simple and easy to use without any complexity. Review collected by and hosted on G2.com.

i am using it from last 2.5 years and i did not found anything wrong about keyclaok it works perfectly and i dont have any point to mention the dislikes of keyclaok its awesome tool. Review collected by and hosted on G2.com.

Ease of Implementation. As I was pretty new to Identity and Access management thing keycloak was first tool I used and It was pretty straightforward to setup and use. Review collected by and hosted on G2.com.

Support. We had to scale with lot more users coming in and we required support for the same. And support was not satisfactory. It could have been better. Review collected by and hosted on G2.com.

Keycloak is open-source authentication and IAM platform which integrates SSO & LDAP for our AWS environment. It has superb feature provisions such as user management, multi-layered authentication protocols, and fine-grained authorization. It incorporates authentication to our EKS clusters and provides security services with less effort. Also, it supports our organization's protocol standards like OpenID connect, SAML 2.0, and OAuth, which are mostly preferred by our clients. Review collected by and hosted on G2.com.

Keycloak provides the capabilities to include access to only the entry point and effectively control who is able to access the services. In our AWS accounts, few have privileges to add access on their own manually or remove other users' access by mistake, but after setting up Keycloak, these difficulties were prevented. Overall, I'm satisfied with the endpoint access protection and compliance solutions offered to our AWS Infrastructure by Keycloak. Review collected by and hosted on G2.com.

Keycloak is open source and offers support plans for enterprise customers and provides the features needed for my configuration of LDAP, SAML, OIDC, and OAuth workflow and user setup. Review collected by and hosted on G2.com.

Multitenancy and High-Availability configuration and monitoring could be better. Making the session replication for the High-Availability mode would make it better. Review collected by and hosted on G2.com.

You can united the all services and applications with the same authentication way using keycloack.

Also key cloak give you many implemented option to handle access and roles .

The UI is very helpful and usable Review collected by and hosted on G2.com.

In some old versions I faced issues that the configuration is reset automatically, after I update it this issue is solved. Review collected by and hosted on G2.com.

I like the realm configuration and the way in which we can achieve a multi-tenant setup. I tried having a local setup of keycloak on my machine and it was pretty easy. You can have a local docker container running and can easily play with the app. Another feature that I felt was pretty cool is , it can be plugged and played with existing systems, as its integration is seamless. Review collected by and hosted on G2.com.

I dislike the documentation and the examples that are provided in them. The documentation deals only with a single happy path considering very specific usecases. Review collected by and hosted on G2.com.

defining policies and assigning roles to it Review collected by and hosted on G2.com.

Using scope based implementation in keycloak Review collected by and hosted on G2.com.

Its fast and i can easily manage all my users inside my organization instead of on any cloud vendor. Review collected by and hosted on G2.com.

Active Directory its easy to integrate with third party system. But when its comes to writing custom User Federation adapter code and try to understand sometimes i get lost in debugging. Review collected by and hosted on G2.com.

Well structured documentation

Following up best practices

Domain extension support

Customizable

Most of the user management features included

LDAP and other 3rd party support Review collected by and hosted on G2.com.

Usage of angular 1

No minification for frontend build

No built-in support for authentication popup etc

Requires running keycloak in a separate server for getting support Review collected by and hosted on G2.com.