An IAM platform built for software companies
The Skycloak Platform is Skycloak's own multi-tenant sign-in engine. It gives your product sign-in, user management and access control without your team running an identity server, and it is built around companies that sell software to other businesses and to consumers.
What an IAM platform does for your product
Identity and access management, or IAM, is the part of your product that decides who a user is and what they may do. An IAM platform runs that part for you as a service: it hosts the sign-in pages, stores the user accounts, issues the tokens your application checks and keeps a record of who signed in and when.
Running this yourself means operating a security-critical server around the clock, patching it, scaling it and keeping its database safe. Moving it to a platform lets your team spend that time on the product your customers pay for.
How the Skycloak Platform is built
Each of your environments is a tenant with its own users, settings and sign-in address, and tenants are kept apart by the database itself rather than by application code alone. The Platform speaks OpenID Connect and OAuth 2.1, so any framework with a standard client library can sign your users in.
Tenants run in the United States or in the European Union. A tenant's region is fixed when you create it, so your users' data stays where you chose to keep it.
What is on the plan
Passkeys, multi-factor authentication, enterprise SSO over SAML, SCIM provisioning, organizations for your business customers, roles per organization and custom domains are all on the Platform's plan. We describe a feature as available only once it has shipped, so a demo is the place to see what you can use today.
The plan also includes a move from Keycloak that imports your users with their passwords and passkeys, so nobody has to reset a password on the day you switch.
Frequently asked questions
Do I have to run any servers?
No. Skycloak runs the Platform, including its database and its upgrades. Your application talks to it over the standard OpenID Connect and OAuth protocols.
See the Skycloak Platform for yourself
Book a demo and we will walk you through the Platform with your own sign-in flows in mind.