Integration Guides

Connect Anything to Keycloak

Step-by-step guides to integrate your applications with Keycloak SSO. Production-tested configurations for popular stacks.

Nextcloudintermediate

Nextcloud SSO with Keycloak using OIDC

Run Nextcloud in Docker Compose behind an nginx TLS proxy and connect it to Keycloak SSO using the Social Login app. Covers full stack setup, Keycloak client config, manual endpoint configuration, attribute mapping, and exclusive SSO enforcement.

15 min readRead guide
GitLabbeginner

GitLab SSO with Keycloak using OIDC

Configure Keycloak SSO for GitLab using the built-in openid_connect OmniAuth provider. Covers confidential client setup, gitlab.rb configuration, and access control by Keycloak group membership.

12 min readRead guide
Grafanabeginner

Grafana SSO with Keycloak using OIDC

Set up Keycloak SSO in Grafana using the built-in generic OAuth provider. Covers confidential client setup, role mapping, auto-login, and single logout.

10 min readRead guide
Jenkinsintermediate

Jenkins SSO with Keycloak using OIDC

Set up Keycloak SSO in Jenkins using the oic-auth plugin. Covers plugin installation, confidential client setup, security realm configuration, and field mapping for username and email.

16 min readRead guide
Auth0intermediate

Keycloak Auth0 Identity Provider: OIDC Setup

Add Auth0 as an identity provider in Keycloak using the generic OIDC provider. Covers Auth0 application creation, allowed callback URL configuration, Keycloak IDP setup, attribute mappers, and first login flow.

13 min readRead guide
Microsoft Entra IDintermediate

Keycloak Microsoft Entra ID Identity Provider Setup

Configure Microsoft Entra ID (formerly Azure AD) as an identity provider in Keycloak. Covers app registration in Azure Portal, client secret creation, Keycloak IDP configuration with the built-in Microsoft provider, attribute mappers, and tenant vs multi-tenant setup.

15 min readRead guide
Facebookbeginner

Keycloak Facebook Identity Provider: Social Login Setup

Add Facebook as an identity provider in Keycloak so users can sign in with their Facebook account. Covers Meta app creation, Facebook Login product configuration, Keycloak IDP setup, attribute mappers, and first login flow.

12 min readRead guide
Googlebeginner

Keycloak Google Identity Provider: Social Login Setup

Add Google as an identity provider in Keycloak so users can sign in with their Google account. Covers OAuth consent screen setup, client creation in Google Cloud Console, Keycloak IDP configuration, attribute mappers, and the first login flow.

12 min readRead guide
LinkedInintermediate

Keycloak LinkedIn Identity Provider: OIDC Setup

Configure LinkedIn as an identity provider in Keycloak using the Sign In with LinkedIn using OpenID Connect product. Covers LinkedIn app creation, OIDC product setup, generic OIDC provider configuration in Keycloak, and attribute mappers.

13 min readRead guide
Oktaintermediate

Keycloak Okta Identity Provider: OIDC Setup

Add Okta as an identity provider in Keycloak using the generic OIDC provider. Covers Okta OIDC app creation, authorization server selection, Keycloak IDP configuration, attribute mappers, and first login flow.

14 min readRead guide
PingOneadvanced

Keycloak PingOne Identity Provider: OIDC Setup

Configure PingOne (Ping Identity) as an identity provider in Keycloak using the generic OIDC provider. Covers PingOne application creation, environment ID, discovery URL construction, Keycloak IDP configuration, and attribute mappers. Includes a PingFederate section for on-premise deployments.

16 min readRead guide
Kubernetesadvanced

Kubernetes SSO with Keycloak using OIDC and kubelogin

Configure Keycloak as the OIDC provider for the Kubernetes API server using kube-apiserver flags and kubelogin as a kubectl exec credential plugin. Covers public PKCE client setup, groups mapper, RBAC bindings, and kubeconfig.

18 min readRead guide
Portainerbeginner

Portainer SSO with Keycloak using OAuth2

Configure Keycloak SSO for Portainer CE using built-in OAuth2 authentication. Covers confidential client setup, Portainer authentication settings, and the URL fields for authorization, token, and userinfo.

10 min readRead guide
Vueintermediate

Vue 3 SSO with Keycloak using OIDC + PKCE

Integrate Keycloak SSO into a Vue 3 single-page application using Authorization Code Flow with PKCE. Covers oidc-client-ts setup, a reusable auth composable, Vue Router guards, and token refresh.

12 min readRead guide
Next.jsintermediate

Next.js SSO with Keycloak using OIDC

Integrate Keycloak SSO into a Next.js App Router application using Auth.js (next-auth v5). Covers confidential client setup, server and client session access, token refresh, and single logout.

15 min readRead guide
Odoointermediate

Odoo SSO with Keycloak using OIDC

Step-by-step guide to configure Odoo SSO with Keycloak using OpenID Connect. Uses KeycloakPro's pre-built Keycloak image — supports 300+ application integrations out of the box — for custom add-on installation, client setup, and group mapping.

14 min readRead guide
Reactintermediate

React SPA SSO with Keycloak using OIDC + PKCE

Integrate Keycloak SSO into a React single-page application using Authorization Code Flow with PKCE. Covers library setup, token storage, silent refresh, and protected routes.

13 min readRead guide
WordPressbeginner

WordPress SSO with Keycloak using OIDC

Configure single sign-on between WordPress and Keycloak using the OpenID Connect Generic plugin. Covers client setup, plugin configuration, role mapping, and single logout.

11 min readRead guide

Don't see your stack?

We integrate Keycloak with any platform. Book a free call and we'll scope your integration in 30 minutes.