Skip to main content

Managed IAM / SSO

Managed Keycloak Hosting

Enterprise SSO & IAM: open source, fully managed

License: Apache-2.0 GitHub: 24K stars Infra: 2–4 GB RAM, 2 vCPU

What is Keycloak?

Keycloak is the gold standard for open-source identity and access management. It provides SSO, social login, LDAP federation, fine-grained authorization, and MFA, all in a battle-tested platform used by thousands of enterprises worldwide.

Use cases

  • Organizations needing identity management at scale
  • SaaS products needing embedded multi-tenant authentication
  • Enterprise SSO across internal applications and microservices
  • B2C authentication with social login and self-registration

Features

  • Single Sign-On (SAML 2.0, OIDC, OAuth 2.0)
  • Social login and identity brokering
  • LDAP and Active Directory federation
  • MFA (TOTP, WebAuthn, SMS)
  • Fine-grained authorization policies
  • Admin console and REST management API

Simple, transparent pricing

Same software, fraction of the cost.

Starter

Up to 1,000 users

From $40 /mo
  • Keycloak + PostgreSQL
  • Up to 1,000 user accounts
  • OIDC / OAuth 2.0 / SAML
  • Basic MFA (TOTP)
  • Daily backups
  • Email support
Contact us

Most popular

Business

Up to 10,000 users

From $60 /mo
  • Everything in Starter
  • Up to 10,000 users
  • LDAP / AD federation
  • WebAuthn / passkeys
  • Custom themes and login pages
  • Priority support
Contact us

Enterprise

Unlimited users

From $80 /mo
  • Everything in Business
  • Unlimited users and realms
  • Multi-realm configuration
  • Fine-grained authorization
  • SLA-backed uptime guarantee
  • Dedicated account manager
Contact us

Every plan includes

Managed hosting

Dedicated bare-metal servers

Automated backups

Daily backups with 30-day retention

SSL included

Automatic HTTPS with Let's Encrypt

Monitoring

24/7 uptime monitoring and alerting

Compliance-ready hosting

Every managed deployment runs on EU infrastructure. Data Processing Agreement available on request. All services covered under a single DPA.

View compliance documentation →

Frequently asked questions

Which SSO protocols does managed Keycloak support?

Keycloak supports SAML 2.0, OIDC, and OAuth 2.0 out of the box. All three are configured and tested as part of onboarding, so your applications can use whichever protocol they require.

How many realms and users can I run on each plan?

Starter covers up to 1,000 users in a single realm. Business supports up to 10,000 users and adds LDAP/AD federation. Enterprise is unlimited users and realms, with multi-realm configuration for multi-tenant SaaS setups.

Can I connect Keycloak to our Active Directory or LDAP server?

Yes, on Business and Enterprise plans. We configure the LDAP federation provider, map user attributes and groups, and set sync intervals to keep Keycloak in step with your directory.

Can I migrate an existing Keycloak instance to your hosting?

Yes. We import your realm JSON export, migrate users and credentials, and replicate your existing client configurations. Provide your current Keycloak version before sign-up and we match it exactly.

Ready to get started with Keycloak?

Your instance is provisioned in minutes. No credit card required for a consultation.

Contact us