Keycloak is an open source identity and access management platform that provides single sign-on, user federation, and strong authentication for modern applications and services. This preconfigured AMI deploys a fully operational Keycloak environment on AWS, giving teams a self-hosted Auth0 alternative with full control over user data, authentication flows, and identity infrastructure, without manual installation or configuration.
"Keycloak is an open source Identity and Access Management (IAM) solution that provides single sign-on, user federation, identity brokering, and social login for applications and services. This preconfigured AMI on AWS deploys a fully operational Keycloak environment, eliminating manual installation and configuration so teams can start securing applications immediately after launch.
Single Sign-On: Secure one login across multiple applications and services with standards based SSO.
Identity Brokering & Social Login: Connect existing OpenID Connect or SAML 2.0 identity providers, and enable login via Google, GitHub, and other social providers.
User Federation: Sync and authenticate users directly against existing LDAP or Active Directory servers without migrating identities.
Standards Based Protocols: Secure applications and APIs using OpenID Connect, OAuth 2.0, and SAML 2.0 out of the box.
Fine Grained Authorization: Apply role based and attribute based access control policies to protect resources at a granular level.
Admin Console & Themes: Manage realms, clients, users, and roles through a full featured admin console, with customizable login themes.
Version: 26.6.4
Operating System: Ubuntu 24.04
Keycloak provides a flexible, self-hosted foundation for startups, enterprises, SaaS platforms, and development teams that need enterprise grade identity and access management without SaaS lock-in or per-user licensing costs. Deploy a production ready Auth0 alternative in minutes and start securing applications with full ownership of your authentication infrastructure. Keycloak Step by step Installation Guide: https://meetrix.io/blogs/keycloak-developer-guide/"
Highlights
Single Sign-On & Identity Brokering: Secure every application with one login, and connect existing OpenID Connect, SAML, and social identity providers.
Standards Based Security: Protect applications and APIs using OpenID Connect, OAuth 2.0, and SAML 2.0, with fine grained role and attribute based access control.
LDAP & Active Directory Federation: Authenticate users directly against existing directories without migrating or duplicating identity data.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Keycloak - Open Source Identity & Access Management, Auth0 Alternative
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
You pay by the hour for the software running on your chosen EC2 instance size. Pricing is usage-based, so you are billed only for the hours each instance runs. The dimensions are not feature tiers; they are different EC2 instance types across several families, including general-purpose (t2, t3, t3a, m4, m5, m5a, m6a, m6i, m7a, m7i), compute-optimized (c5, c5a, c6a), and memory-optimized (r5, r5a, r6a, r6i). Larger or more powerful instances carry a higher hourly rate. Choose the instance that matches your compute, memory, and workload needs. The vendor suggests t3a.medium as a baseline.
Top-of-mind questions for buyers
What do I get for each hourly instance charge?
You get a pre-configured Keycloak Amazon Machine Image running on the EC2 instance type you select. Keycloak is an open-source identity and access management tool offering single sign-on, social login, identity brokering, and user federation. The hourly rate covers the software on that running instance.
Am I charged when the instance is stopped or paused?
The software rate meters running time only, so a stopped instance does not accrue hourly software charges. You can stop the instance in the EC2 console and restart it later. Note that stored data on attached storage may still incur separate AWS storage fees while stopped.
How does cost change if I switch to a larger EC2 instance type?
Each instance type has its own hourly rate, so switching changes your hourly charge. You are billed for the type actually running. To change type, you redeploy on the new instance. Moving from t3a.medium to a compute- or memory-optimized type raises the hourly rate accordingly.
meetrix.io
Helpful?
Vendor refund policy
We do not currently support refunds, but you can cancel at any time.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
First Release
Additional details
Usage instructions
"Click the ""Continue to Subscribe"" button.
After subscribing, you will need to accept the terms and conditions. Click on ""Accept Terms"" to proceed.
Please wait for a few minutes while the processing takes place. Once it's completed, click on ""Continue to Configuration"".
IAM Role is set up and configured with the necessary permissions to assume the role for the Keycloak service. The IAM Policy is created and responsible for access Route53 and create Letsencrypt SSL certificates and backing up data to the S3 bucket.
Access the application via a browser at http://<your domain name> or http://<Public IPv4 address>.
Product will try to create SSL certificate when its deploying, if domain hosted on route53. If the automatic SSL creation unsuccessful then you have to point domain name into server ip, ssh into server and run /root/certificate_generate_standalone.sh. Admin email using for SSL generation."
Please contact us through aws@meetrix.io. Please allow up to 12 hours for our support team to address your request.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
This product has charges associated with it for seller support. Keycloak is an open-source identity and access management (IAM) solution designed to secure applications and services. Developed by Red Hat, Keycloak simplifies user authentication, authorization, and user management, offering a centralized platform for handling identity-related tasks. It supports various authentication methods, including social logins, single sign-on (SSO), and multi-factor authentication, making it a versatile solution for securing web applications, mobile apps, and APIs.
This is a repackaged open source software product wherein additional charges apply for patching the operating system and the maintenance provided by Kurian. This AMI has Keycloak installed as a service with PostgreSQL as the backend database.
Choose AMI for the target OS and version.
Launch a private Keycloak identity and access management server on AWS with automated first boot, generated administrator credentials, HTTPS access, PostgreSQL, and built in backup and restore helpers. This product has a fee associated with the provision and deployment of the application and AMI support.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.