A Keycloak authenticator to restrict authorization on clients

Keycloak: Home IdP Discovery - discover home identity provider or realm by email domain

Keycloak extension for creating multi-tenant IAM for B2B SaaS applications.

Extension Keycloak facilitant l'utilisation de FranceConnect

Keycloak Extension - Custom Event Listener. User create and register events, listen and Call Rest API with Java

Keycloak deployment that provides similar functionality to Google reCaptcha, but with a more privacy friendly provider named hCaptcha.

Default Keycloak login form with additional validation of configurable user attribute!

a Keycloak broker mapper that maps a multivalued OIDC claim (e.g.: groups) or SAML attribute (e.g.: groupMembership) into one or more realm and/or client role assignments based on regular expressions

A Keycloak SPI that enables user registration using a predefined invitation code. Also an example of Keycloak FormAction SPI

Generate app specific passwords in Keycloak

Keycloak extension to enable register, generate, verify TOTP credential via API.

a Keycloak browser authenticator that enforces an impersonation policy restricting impersonators from accessing service providers (clients) unless holding an associated client role

A GraphQL API for Keycloak

Extension implementing a keycloak Identity Provider that can issue direct (synchronous) SAML requests to external providers, like eHerkenning or DigiD, provided by Statistics Netherlands (CBS).

📧 Keycloak addon to use the Sendinblue API for sending mails

Alternative authentication flow for Keycloak, separating the input fields for email and password.

Alternative authentication method, sending the user a different login code to their email for each login.

The Keycloak password hashprovider extension enables Keycloak to support other password hashing algorithm than the built-in PBKDF2.

Add keycloak user attribute from http json api at authentication time

Ressourcen für @dasniko's Keycloak Extension Development Workshop