B2B & Multi-tenant
Make Keycloak fit the way SaaS companies actually sell — per-customer organizations, customer-managed SSO, and a safe admin surface for end users.
Organizations
First-class multi-tenant orgs with per-organization SSO, invitations, roles, and APIs. The foundation for B2B identity on Keycloak.
Learn moreIdP Wizard
A guided, self-serve flow that lets your customers configure their own SAML or OIDC identity provider without filing a ticket.
Learn moreAdmin Portal
An embeddable, scoped admin UI safe to expose to customer admins — so they manage their users and SSO without touching the Keycloak console.
Learn moreAuthentication
Login flows that customers expect in 2026 and that Keycloak doesn't ship out of the box.
Operations
Run Keycloak the way you run the rest of your platform — observable, scriptable, deployable.
Events
Webhooks and scriptable event handlers for Keycloak. Export audit events to your stack and trigger workflows on identity events.
Learn moreUser Migration
Move users from a legacy IdP to Keycloak without forcing a password reset. Authenticate against the old system on first login, then migrate transparently.
Learn moreContainers
Production-ready Keycloak container images with Phase Two extensions, opinionated defaults, and the build wiring you'd otherwise have to assemble yourself.
Learn moreWhy we open source these
Paying it forward
Keycloak is the open source identity standard for a reason. The gaps that keep teams from running it in production are the same gaps, over and over — and we maintain the fixes in the open so the whole community benefits.
The community benefits
Rather than keep these fixes proprietary, we maintain them on GitHub so the entire Keycloak ecosystem can use, fork, and contribute to them.
Self-hosted parity
Teams running their own Keycloak can ship the same features we offer in our managed product — no second-class open source tier.
Elastic License v2, developed in public
Every extension on this page is licensed under the Elastic License v2 and developed in public on GitHub. Issues, PRs, and roadmap are all out in the open — read the licensing change post for context.