What you can do with Keycloak
Every task in plain language. Pick one, and we can help you get access.
13 things you can do
Keycloak
Keycloak is an open source identity and access management solution for modern applications and services, providing single sign-on, identity brokering, user federation, and fine-grained authorization using OAuth 2.0 and OpenID Connect.
13 multi-step recipesRecipes: multi-step jobs
Apply a Realm Security BaselineApply and verify a security baseline on a Keycloak realm.Assign a User to a Group
Add a user to a group by username and group name, then verify the membership.Audit Group Membership
Read a group's roles and member roster, with a spot check of one member's direct roles.Audit a User's Effective Access
Gather a single user's profile, realm roles, and groups for an access review.Decommission a Client
Capture, disable, and optionally delete a client registration.Federate an Identity Provider
Create or update a federated identity provider and confirm its configuration.Inventory a Realm
Assemble a read-only configuration inventory of a single realm.Offboard a User
Disable a realm user, remove its roles and group membership, and optionally delete it.Onboard a User
Create a user in a realm, set an initial password, and assign a realm role.Provision a Group Hierarchy
Create a parent group with a nested child group and return the resulting tree.Register a Confidential OIDC Client
Create a confidential OIDC client and retrieve its client secret.Rotate a Client Secret
Regenerate a confidential client's secret and confirm the new value.Upsert a Realm Role
Idempotently define a realm-level role and return its stored representation.