Integration Guides
Step-by-step guides to integrate your applications with Keycloak SSO. Production-tested configurations for popular stacks.
Keycloak LinkedIn Identity Provider: OIDC Setup
Configure LinkedIn as an identity provider in Keycloak using the Sign In with LinkedIn using OpenID Connect product. Covers LinkedIn app creation, OIDC product setup, generic OIDC provider configuration in Keycloak, and attribute mappers.
Read guideNextcloud SSO with Keycloak using OIDC
Run Nextcloud in Docker Compose behind an nginx TLS proxy and connect it to Keycloak SSO using the Social Login app. Covers full stack setup, Keycloak client config, manual endpoint configuration, attribute mapping, and exclusive SSO enforcement.
Read guideGitLab SSO with Keycloak using OIDC
Configure Keycloak SSO for GitLab using the built-in openid_connect OmniAuth provider. Covers confidential client setup, gitlab.rb configuration, and access control by Keycloak group membership.
Read guideGrafana SSO with Keycloak using OIDC
Set up Keycloak SSO in Grafana using the built-in generic OAuth provider. Covers confidential client setup, role mapping, auto-login, and single logout.
Read guideJenkins SSO with Keycloak using OIDC
Set up Keycloak SSO in Jenkins using the oic-auth plugin. Covers plugin installation, confidential client setup, security realm configuration, and field mapping for username and email.
Read guideKeycloak Auth0 Identity Provider: OIDC Setup
Add Auth0 as an identity provider in Keycloak using the generic OIDC provider. Covers Auth0 application creation, allowed callback URL configuration, Keycloak IDP setup, attribute mappers, and first login flow.
Read guideKeycloak Microsoft Entra ID Identity Provider Setup
Configure Microsoft Entra ID (formerly Azure AD) as an identity provider in Keycloak. Covers app registration in Azure Portal, client secret creation, Keycloak IDP configuration with the built-in Microsoft provider, attribute mappers, and tenant vs multi-tenant setup.
Read guideKeycloak Facebook Identity Provider: Social Login Setup
Add Facebook as an identity provider in Keycloak so users can sign in with their Facebook account. Covers Meta app creation, Facebook Login configuration, Keycloak IDP setup, attribute mappers, and first login flow.
Read guideKeycloak Google Identity Provider: Social Login Setup
Add Google as an identity provider in Keycloak so users can sign in with their Google account. Covers OAuth consent screen setup, client creation in Google Cloud Console, Keycloak IDP configuration, attribute mappers, and the first login flow.
Read guideKeycloak Okta Identity Provider: OIDC Setup
Add Okta as an identity provider in Keycloak using the generic OIDC provider. Covers Okta OIDC app creation, authorization server selection, Keycloak IDP configuration, attribute mappers, and first login flow.
Read guideKeycloak PingOne Identity Provider: OIDC Setup
Configure PingOne (Ping Identity) as an identity provider in Keycloak using the generic OIDC provider. Covers PingOne application creation, environment ID, discovery URL construction, Keycloak IDP configuration, and attribute mappers. Includes a PingFederate section for on-premise deployments.
Read guideKubernetes SSO with Keycloak using OIDC and kubelogin
Configure Keycloak as the OIDC provider for the Kubernetes API server using kube-apiserver flags and kubelogin as a kubectl exec credential plugin. Covers public PKCE client setup, groups mapper, RBAC bindings, and kubeconfig.
Read guidePortainer SSO with Keycloak using OAuth2
Configure Keycloak SSO for Portainer CE using built-in OAuth2 authentication. Covers confidential client setup, Portainer authentication settings, and the URL fields for authorization, token, and userinfo.
Read guideVue 3 SSO with Keycloak using OIDC + PKCE
Integrate Keycloak SSO into a Vue 3 single-page application using Authorization Code Flow with PKCE. Covers oidc-client-ts setup, a reusable auth composable, Vue Router guards, and token refresh.
Read guideNext.js SSO with Keycloak using OIDC
Integrate Keycloak SSO into a Next.js App Router application using Auth.js (next-auth v5). Covers confidential client setup, server and client session access, token refresh, and single logout.
Read guideOdoo SSO with Keycloak using OIDC
Step-by-step guide to configure Odoo SSO with Keycloak using OpenID Connect. Uses KeycloakPro's pre-built Keycloak image — supports 300+ application integrations out of the box — for custom add-on installation, client setup, and group mapping.
Read guideReact SPA SSO with Keycloak using OIDC + PKCE
Integrate Keycloak SSO into a React single-page application using Authorization Code Flow with PKCE. Covers library setup, token storage, silent refresh, and protected routes.
Read guideWordPress SSO with Keycloak using OIDC
Configure single sign-on between WordPress and Keycloak using the OpenID Connect Generic plugin. Covers client setup, plugin configuration, role mapping, and single logout.
Read guideDon't see your stack?
We integrate Keycloak with any platform. Book a free call and we'll scope your integration in 30 minutes.