What is Keycloak?

Keycloak is an open-source identity and access management (IAM) tool. It allows you to add login functionality to applications without having to store and verify users separately in each one. It supports OpenID Connect, OAuth 2.0, and SAML 2.0 standards, social media login, two-factor authentication, and integration with existing user directories such as LDAP and Active Directory. The project has incubator status at the Cloud Native Computing Foundation.

In ecommerce, Keycloak can serve as the identity provider for Single Sign-On: the customer has a single account for both the online store and the mobile app, and Keycloak handles the login process rather than each channel doing so separately. Since it is software rather than a subscription service, it is typically hosted on the merchant’s own infrastructure and integrated with the store via a module.