Keycloak

Open-source alternative · mapped from 2 paid tools. Fit is not feature parity.

Facts

License

Apache License 2.0 A permissive license whose main conditions require preservation of copyright and license notices. Contributors provide an express grant of patent rights. Licensed works, modifications, and larger works may be distributed under different terms and without source code. May Commercial useModificationDistributionPatent usePrivate use Must License and copyright noticeState changes No Trademark useLiabilityWarranty Summary from GitHub's choosealicense.com

Paid-feature tier A

Self-host

Paid-feature limitsNone established

Tier A: Community IAM product; documented SSO, federation, administration, MFA and authorization included. No project commercial feature edition identified. Third-party hosting/support not counted as a project hosted offering. License source. Repository: keycloak/keycloak. Self-host: server; hosted offer from the project: no.

Replaces 2 paid tools

Auth0Entry price USD 35 / account / month

Fit:

Reconfigure applications for OIDC/SAML, migrate or federate directories, rebuild policies and login flows. Covers identity provider/login needs; assess workforce lifecycle and vendor integration parity separately.

Sources: www.keycloak.org · checked 2026-10-21
Full comparison: Auth0 vs Keycloak
Okta Workforce IdentityEntry price USD 6 / seat / month

Fit:

Reconfigure applications for OIDC/SAML, migrate or federate directories, rebuild policies and login flows. Covers identity provider/login needs; assess workforce lifecycle and vendor integration parity separately.

Sources: www.keycloak.org · checked 2026-10-21
Full comparison: Okta Workforce Identity vs Keycloak

Selected by OSSHunt

Keycloak is listed as an open-source alternative to Auth0 and Okta Workforce Identity, with partial fit or better. Maintainers can show this in a README; the badge links back to this page.

Markdown

[![OSSHunt: replaces Auth0 · Okta Workforce Identity](https://osshunt.com/badge/keycloak.svg)](https://osshunt.com/alternatives/keycloak/)

HTML

<a href="https://osshunt.com/alternatives/keycloak/"><img src="https://osshunt.com/badge/keycloak.svg" alt="OSSHunt: replaces Auth0 · Okta Workforce Identity"></a>

reStructuredText

.. image:: https://osshunt.com/badge/keycloak.svg
   :target: https://osshunt.com/alternatives/keycloak/
   :alt: OSSHunt: replaces Auth0 · Okta Workforce Identity

Shields users: https://img.shields.io/endpoint?url=https%3A%2F%2Fosshunt.com%2Fbadge%2Fkeycloak.json. Styles: add ?style=flat-square, plastic or for-the-badge. What the badge means and how to remove it.