Sold by: ProvenCloud
Deployed on AWS
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use Keycloak 26.8.1 identity and single sign-on server. Add login, single sign-on and user management to your applications with OpenID Connect, OAuth 2.0 and SAML, with unique passwords and keys for every instance.
Overview
Keycloak is a widely used open source identity and access management server. It adds sign-in, single sign-on, user management and two-factor authentication to web and mobile applications through standard protocols, so developers do not have to build login themselves. Teams use it to give users one login across many applications, to connect LDAP or Active Directory, and to secure APIs with OAuth 2.0 tokens. This image gives you a production-mode Keycloak server in minutes.
What is included: Keycloak 26.8.1 in production mode on Ubuntu 24.04 LTS with OpenJDK 21, PostgreSQL 16 as its database, nginx publishing it on HTTP and HTTPS, and Webmin 2.670 for server administration. The server address and certificate follow the instance's public IP, and a domain name you set is left alone. Security is on by default: no password or key ships in the image. On first boot every instance creates its own administrator, realm signing keys, database password and HTTPS certificate. Keycloak and PostgreSQL listen only on the server itself behind nginx, no cluster port is opened, and SSH accepts key-based login only.
What you get on top of the free software: a pre-built and tested image that is ready in minutes, a unique security setup for every server, simple scripts for changing passwords, regular image updates, and help by email whenever you need it. Keycloak is open source software licensed under Apache-2.0. Keycloak is a trademark of its respective owner. This image is an independent build by ProvenCloud.
Highlights
- Ready in minutes: launch the instance, open the admin console over HTTPS and sign in. Keycloak in production mode, PostgreSQL, nginx with HTTPS and Webmin are already installed and configured.
- Secure by default: no shared or default passwords. Every instance creates its own administrator, token-signing keys, database password and HTTPS certificate on first boot, and sign-in from outside requires HTTPS.
- One login for all your apps: single sign-on with OpenID Connect, OAuth 2.0 and SAML, social and LDAP or Active Directory login, two-factor authentication, user federation and fine-grained roles.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t3a.medium Recommended | $0.04 |
c1.xlarge | $0.06 |
c3.2xlarge | $0.10 |
c3.4xlarge | $0.10 |
c3.8xlarge | $0.10 |
c3.xlarge | $0.06 |
c4.2xlarge | $0.10 |
c4.4xlarge | $0.10 |
c4.8xlarge | $0.10 |
c4.xlarge | $0.06 |
Dimensions summary
You pay an hourly software charge that runs on top of your own EC2 compute costs, billed by AWS. The many dimensions here are not feature tiers. Each one maps to a specific EC2 instance type, grouped by family such as compute (c), memory (r), general purpose (m), storage (i, d), and accelerated (g, p) instances. The software itself is identical across every choice. Your hourly rate scales with the instance size you pick, since larger instances carry more vCPU and memory. Choose the instance that fits your workload and budget.
Top-of-mind questions for buyers
You get a pre-built machine image running the single sign-on server, database, web proxy and admin console on Ubuntu 24.04 LTS. The software is open source and needs no licence key. The hourly charge is for the packaged, configured image; it is identical across every instance type you pick.
The hourly software charge meters running time, so a fully stopped instance does not accrue it. You pay only while the instance runs. Stopped instances may still incur AWS storage fees for the attached disk, billed separately by AWS, not by the software charge.
Two charges apply at once. The hourly software charge is a fixed rate per instance type. Your own EC2 compute and storage costs are separate, billed by AWS at standard rates. Both appear on your usual AWS bill. Larger instance types raise both the software rate and the EC2 cost.
www.provencloud.io
Helpful?
Vendor refund policy
Software charges are billed hourly, only while your instance runs. You can stop charges at any time by terminating the instance or cancelling your subscription. Charges already incurred are not refundable.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Latest stable release on AWS Marketplace.
Keycloak 26.8.1 (production mode) on Ubuntu 24.04 LTS with OpenJDK 21, PostgreSQL 16, nginx (HTTP and HTTPS) and Webmin 2.670.
A unique administrator, realm signing keys, database password and HTTPS certificate are created for every instance on first boot.
Includes helper scripts in /home/ubuntu/iscripts for changing passwords.
Additional details
Usage instructions
Once the instance is running, wait for the instance health checks to pass, then allow about three minutes for the first-boot setup to finish. Open https://<instance-public-ip>/admin/ in your browser and accept the one-time warning for the server's self-signed certificate. Sign in to the administration console with admin as username and your instance ID as password. Sign-in must use HTTPS: Keycloak refuses logins over plain HTTP from outside the server.
Your applications use the same address for OpenID Connect and SAML, for example https://<instance-public-ip>/realms/<your-realm>/.well-known/openid-configuration. You can access the Webmin page at port 8000, so your URL will be http://<instance-public-ip>:8000 and use admin as username and your instance ID as password. You can also access your instance via SSH using the username ubuntu and your Amazon private key.
Required inbound ports: 22 (SSH), 80 and 443 (Keycloak) and 8000 (Webmin). For security, allow ports 22 and 8000 only from your own IP address.
Your instance ID is shown in the EC2 console, for example i-0123456789abcdef0. Allow about three minutes after launch for the first-boot setup to finish before you sign in. Every instance sets its own passwords on first boot, so no two instances share a password.
Change your passwords after the first sign-in: connect over SSH and run sudo bash /home/ubuntu/iscripts/pass_keycloak.sh for the Keycloak administrator or pass_webmin.sh for Webmin, from the same folder. To check the server, run sudo bash /home/ubuntu/iscripts/keycloak_status.sh.
For production, point your own domain at the instance and replace the self-signed certificate with a trusted one, so your applications and users can trust the sign-in page.
Resources
Vendor resources
Support
Vendor support
Email: support@provencloud.io
Support page: https://www.provencloud.io/support
Hours: Monday to Friday, 10:00 to 19:00 IST (UTC+05:30)
Billing and refunds for this subscription are handled by AWS Marketplace.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
![Metabase Business Intelligence on Ubuntu 24.04 LTS by ProvenCloud [IN]](https://d7umqicpi7263.cloudfront.net/img/product/f19a1b06-4365-47db-9e33-822bf119854f.com/4c173b409be2aeb8869f955151e879be)
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use Metabase business intelligence server. Ask questions of your data and share dashboards, with no SQL needed for most questions, with unique passwords for every instance.
![Vaultwarden Password Manager on Ubuntu 24.04 LTS by ProvenCloud [IN]](https://d7umqicpi7263.cloudfront.net/img/product/8016aaa2-77c8-42a2-af26-4985e4b8478d.com/4c173b409be2aeb8869f955151e879be)
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use Vaultwarden 1.37.4 password manager server. Keep your team's passwords, notes and cards in your own encrypted vault, served over HTTPS with sign-ups closed by default and unique credentials for every instance.
![Snipe-IT IT Asset Management on Ubuntu 24.04 LTS by ProvenCloud [IN]](https://d7umqicpi7263.cloudfront.net/img/product/c673cfa5-71cd-41da-8809-cfb13951a34e.com/4c173b409be2aeb8869f955151e879be)
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use Snipe-IT 8.7 IT asset management server. Track laptops, software licences, accessories and consumables from one dashboard, with unique passwords for every instance.
![Matomo Web Analytics on Ubuntu 24.04 LTS by ProvenCloud [IN]](https://d7umqicpi7263.cloudfront.net/img/product/e9bb2e02-a1aa-4ee4-abdf-d8f622c2abe5.com/4c173b409be2aeb8869f955151e879be)
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use Matomo 5 web analytics server. Understand your website visitors while keeping all the data on your own server, with unique passwords for every instance.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.