A Keycloak authenticator to restrict authorization on clients

Keycloak: Home IdP Discovery - discover home identity provider or realm by email domain

Keycloak extension for creating multi-tenant IAM for B2B SaaS applications.

Extension Keycloak facilitant l'utilisation de FranceConnect

Keycloak Extension - Custom Event Listener. User create and register events, listen and Call Rest API with Java

Keycloak deployment that provides similar functionality to Google reCaptcha, but with a more privacy friendly provider named hCaptcha.

A Keycloak SPI that enables user registration using a predefined invitation code. Also an example of Keycloak FormAction SPI

a Keycloak broker mapper that maps a multivalued OIDC claim (e.g.: groups) or SAML attribute (e.g.: groupMembership) into one or more realm and/or client role assignments based on regular expressions

Default Keycloak login form with additional validation of configurable user attribute!

Generate app specific passwords in Keycloak

Extension implementing a keycloak Identity Provider that can issue direct (synchronous) SAML requests to external providers, like eHerkenning or DigiD, provided by Statistics Netherlands (CBS).

Keycloak extension to enable register, generate, verify TOTP credential via API.

a Keycloak browser authenticator that enforces an impersonation policy restricting impersonators from accessing service providers (clients) unless holding an associated client role

Alternative authentication flow for Keycloak, separating the input fields for email and password.

A GraphQL API for Keycloak

📧 Keycloak addon to use the Sendinblue API for sending mails

Alternative authentication method, sending the user a different login code to their email for each login.

Sign in to Keycloak using another device with QR Codes

The Keycloak password hashprovider extension enables Keycloak to support other password hashing algorithm than the built-in PBKDF2.

Add keycloak user attribute from http json api at authentication time