Keycloak
Keycloak is an open-source identity and access management server that issues tokens over OpenID Connect and SAML 2.0 for applications it fronts.
What gets deployed with it
- PostgreSQL HA Cluster — required Draft first dependency target for Keycloak session and realm metadata persistence.
Baseline topologies
| Topology | Minimum nodes | Roles |
|---|---|---|
| single-node | 1 | keycloak |
| ha-cluster | 2 | keycloak |
What drives the cost
- Monthly active users
- Users across all realms who sign in at least once during a typical month.
- Peak auth requests per second
- Peak login, token refresh, and token validation request rate across all realms.
Where it runs
bare_metal, dedicated, cloud_vm
Size Keycloak and get a cost estimate