I’ve open sourced a set of Keycloak extensions that are focused on solving several of the common use cases of multi-tenant, SaaS (Software as a Service) applications that Keycloak does not solve out of the box. I often read questions here and on the mailing list about how to support different “orga…

Hello. I am thinking of using Keycloak groups to achieve multi-tenancy in a single realm. What are the issues with the method of separating tenants by groups?(scalability, vulnerability, etc.) What use cases does your solution match? Thank you.

If you use Groups for multi-tenancy in a single realm, you would need a hierarchy of roles per group. E.g. org1 - roleA - roleB org2 - roleA - roleB The extension above has the native concept of per-org roles.

Thank you for your immediate response.

Update for those who would like to try this out without compiling and installing the extension themselves. This is now bundled as a Docker image . This image contains Keycloak, this and other extensions. Documentation and examples for using it are in the phasetwo-containers repo. You can also try i…

how can i integrate the keycloak-orgs extension using dependency injection in Spring Boot ?

That’s quite interesting nice work, I’ll definitely give it a try, as I’m currently building a mutli-tenants saas and was looking at oss iam tools such as keycloak to solve my identity/auth. requirements, but after several readings on the topic, it seems like its ootb multi-tenants support is far fr…

What about posting it as a Github issue? As far as I can see in the Github, the maintainer is quite responsive in the Github Issue page.

@Frank-D Here is a brief answer to your questions: Q1: We’ve got customers using it with over 10k orgs. Q2: The IdP APIs are built as an Admin API to allow organizations to manage their own IdP. The reason it has to be separate from the Keycloak built-in API is that we had to adapt the permissions…

Keycloak multi-tenancy extensions for SaaS applications

Extending the server

xgp October 17, 2022, 9:07am 11

It’s an extensions to Keycloak, not your application. See the README for information on how to use and deploy.

Topic		Replies	Views
Single realm, multi-tenant, tenant scoped role setup advice Getting advice multi-tenancy	22	616	August 26, 2024
Architecture ideas on multi-tenancy at customer permisses Securing applications	8	6684	June 18, 2022
Activate Organization Roles tab Getting advice multi-tenancy , organizations	2	41	March 26, 2026
Keycloak 26.0 \| One Realm - One user - Multiple Organization - Give option to select org while Login Getting advice	2	283	December 5, 2024
Keycloak group based multitenancy Getting advice	2	566	December 2, 2022

Keycloak multi-tenancy extensions for SaaS applications

Related topics