Extend with Plugins
Deploy custom Keycloak extensions and SPIs. Add custom authenticators, mappers, and event listeners without managing infrastructure. Managing extensions is on every plan; uploading your own JAR is included on Enterprise and an add-on on Business.
21-day trial, no card required. · Runs on managed Keycloak.


What is Extensions & Plugins?
Extend Keycloak functionality with custom SPIs and plugins.
Extension Types
Extend Keycloak with custom functionality.
Authenticators
Custom authentication flows and steps.
Protocol Mappers
Custom token claims and SAML attributes.
Event Listeners
Webhooks and custom event handling.
Enterprise Capabilities
Everything you need for secure, scalable authentication
Custom Authenticators
Build custom authentication flows.
Protocol Mappers
Custom claim and attribute mappers.
Event Listeners
React to authentication events.
Easy Deploy
Upload JARs through the dashboard, on Enterprise or on Business with an add-on.
Sandboxed
Extensions run in isolation.
Version Control
Roll back to previous versions.
Example Extensions
Browse and install community extensions from our marketplace
Go Live in 3 Steps
From zero to production in minutes, not months
Create Your Instance
Sign up and deploy your Keycloak instance. One click, fully managed.
2 minutesCustomize Your Branding
Add your logo, colors, and styling to make login pages match your brand.
5 minutesIntegrate Your App
Use existing Keycloak SDKs or standard OIDC/SAML libraries for any framework.
15 minutesNo credit card required. 21-day free trial with full access.
Related Features
Complement your setup with these capabilities
Ready to Get Started?
Start your free trial today. Full access to all features for 21 days.

