Keycloak

Authentication & Identity

Visit Website GitHub

About

Open source identity and access management by Red Hat.

Replaces

AWS Cognito

Amazon

Full

Firebase Authentication

Google

Full

Auth0

Okta

Full

Okta

Full

AWS IAM

Amazon

Partial

Clerk

Full

Kinde

Full

WorkOS

Full

Stytch

Full

Azure AD B2C

Microsoft

Full

Microsoft Entra ID (Azure AD)

Microsoft

Full

CyberArk

Partial

Sovereignty Score

out of 100

Jurisdictional(25%)

Significant foreign legal exposure risk

HQ in United States (EU adequacy decision)
Parent company in United States (CLOUD Act risk) (Red Hat)
Five Eyes intelligence alliance exposure
US CLOUD Act applies (US can compel data access regardless of storage location)

Ownership(20%)

Partial ownership data, some foreign influence possible

Foundation-owned (non-profit)
Funding: Red Hat (IBM subsidiary)
Acquired by another company

Governance(20%)

Open, transparent governance with community involvement

Foundation-governed (neutral stewardship)
Backed by CNCF (Linux Foundation)

Portability(15%)

Highly portable with self-host option and standard APIs

Self-hostable on your infrastructure

License(10%)

True open source with stable, permissive licensing

Apache-2.0 (permissive open source)

Community(10%)

Community metrics not yet collected

No detailed factors available for this dimension.

Quick Facts

Headquarters: United States
Ownership: Foundation
License: Apache-2.0
Deployment: Self-host
Funding: Red Hat (IBM subsidiary)