Identity & Access
Keycloak
Central single sign-on and identity provider
About this program
Every service in the platform authenticates against Keycloak. One account, one password, one place to revoke access.
Features
- OpenID Connect, OAuth 2.0 and SAML in one server
- Single sign-on across files, wiki, mail and design tools
- Group and role mapping driven from one directory
- Brute-force protection, session limits and audit events
Why we chose it
Because it removes the weakest link in any multi-service setup: separate credentials per tool. It is the reference open-source identity server, actively maintained and backed by a foundation.
Related programs
