#19 in Identity & Access ManagementUpdated 2026-08

Keycloak

by Keycloak · Open source identity and access management with single sign-on

42.9 — BenchRank score out of 100

Homepage

Visit website See full Identity & Access Management ranking

Overview

Keycloak is an open source identity and access management server. Applications delegate login to it, so they do not handle login forms, authenticate users or store them, and one session covers every connected application until single sign-out. It supports OpenID Connect, OAuth 2.0 and SAML, connects to LDAP or Active Directory, and is managed from an admin console.

Best for: Teams self-hosting single sign-on and user management for their own applications and services.
Pricing: The captured page shows no prices; Keycloak is described as open source and offered as a download.
Runs on: Linux

Strengths and trade-offs

Strengths

Single sign-on and single sign-out across connected applications
Supports OpenID Connect, OAuth 2.0 and SAML 2.0
Connects to existing LDAP or Active Directory directories
Social login and identity brokering configured without code

Trade-offs

You run, cluster and scale the server yourself; no hosted option shown
Users held in other stores need a provider you implement yourself
Customisation beyond the console's settings requires writing code

How this score is made up

Each dimension is scored out of 100 and combined into the headline score using fixed weights.

MCP support: 60 out of 100
API quality: 10 out of 100
Documentation: 70 out of 100
Agent friendliness: 65 out of 100
Changelog: 25 out of 100
Marketing site structure: 40 out of 100
Operational trust: 10 out of 100

Measured, but not part of the score

Useful to know, but not a mark for or against the product — so these do not affect the ranking.

Openness: 60 out of 100
Maintenance: 100 out of 100

This doesn’t look right — report a problem with Keycloak’s score

Alternatives in Identity & Access Management

Ranked 1
75.9 — BenchRank score out of 100
Ory
Ory · API-first identity and access management, self-hosted or managed
Best for: Engineering teams wanting API-first identity and access management they can self-host or buy as SaaS
Ranked 2
73.8 — BenchRank score out of 100
Logto
Logto · Open-source auth infrastructure with SSO, RBAC and multi-tenancy
Best for: Developers adding auth, enterprise SSO and multi-tenancy to SaaS or AI apps without building it
Ranked 3
73.1 — BenchRank score out of 100
Hexclave
Hexclave · Open-source auth, payments, email and analytics building blocks
Best for: Startups wanting auth, payments, emails and analytics as one open-source, self-hostable platform.