# Outsourcing Keycloak - Choosing a provider

**URL:** <https://forum.keycloak.org/t/outsourcing-keycloak-choosing-a-provider/16052>\
**Category:** Miscellanaeous\
**Created:** [June 20, 2022, 10:45am UTC](https://forum.keycloak.org/t/outsourcing-keycloak-choosing-a-provider/16052 "2022-06-20T10:45:26Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![rew](https://avatars.discourse-cdn.com/v4/letter/r/ed655f/32.png) [@rew](https://forum.keycloak.org/u/rew)\
**Post date:** [June 20, 2022, 10:45am UTC](https://forum.keycloak.org/t/outsourcing-keycloak-choosing-a-provider/16052/1 "2022-06-20T10:45:26Z")

</div>

Hi,

We’ve built and administered our own Keycloak servers for a new platform we created. Our Keycloak activity has been minimal and without security concerns as our service hasn’t been under much use. We expect this to change soon. We intend to invite public users and anticipate that it may take off quickly. We will also release our platform as open source, and want to offer a Keycloak service which developers can use at a cost, as opposed to forcing them to stand up their own Keycloak infrastructure. I expect that each external domain would have it’s own Realm, though I’ll await expert opinion on that.

Please what criteria would you use, and what questions would you ask, if you were seeking an outsourced Keycloak service provider?

If anyone has any recommendations or warnings from their own outsource experience that would be helpful please?

I have spoken to a couple of people through this forum and I will come back to you now that the decision to outsource is the determined strategy.

Thank you

---

<div class="post-metadata">

**Author:** ![xgp](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/xgp/32/2589_2.png) [@xgp](https://forum.keycloak.org/u/xgp)\
**Post date:** [June 20, 2022, 4:49pm UTC](https://forum.keycloak.org/t/outsourcing-keycloak-choosing-a-provider/16052/2 "2022-06-20T16:49:02Z")

</div>

> **[Cloud IAM - Keycloak Identity and Access Management as a Service](https://www.cloud-iam.com/)**
>
> Perfectly configured and optimized Keycloak IAM, ready in seconds

> **[Authentication, keycloak as a service, expertise and consulting](https://please-open.it/)**
>
> We have a Keycloak as a service, subscribe for your own realm with only one click - Senior consultants with strong expertise in the deployement of Keycloak instances.

> **[Phase Two enhanced Keycloak as a Service](https://phasetwo.io/)**
>
> Tools for SaaS builders - Enhanced Keycloak as a Service - Fully secured, managed and hosted Keycloak with custom extensions for SSO, organizations and more specifically tailored to your SaaS application

> **[Bare.ID - Hochsicheres Single Sign-On SaaS aus Deutschland](https://www.bare.id/de/)**
>
> Bare.ID steht für Identity- & Access-Management in der Cloud mit zentralem Single Sign-On und sicherer Mehr-Faktor-Authentifizierung. 100% DSGVO konform.

---

<div class="post-metadata">

**Author:** ![rew](https://avatars.discourse-cdn.com/v4/letter/r/ed655f/32.png) [@rew](https://forum.keycloak.org/u/rew)\
**Post date:** [June 21, 2022, 11:57am UTC](https://forum.keycloak.org/t/outsourcing-keycloak-choosing-a-provider/16052/3 "2022-06-21T11:57:28Z")

</div>

Excellent, thanks Garth. I’m doing some research and I will come back to you.

Please has anyone used the AWS Keycloak service?  
[https://www.amazonaws.cn/en/solutions/keycloak-on-aws/](https://www.amazonaws.cn/en/solutions/keycloak-on-aws/)

---

<div class="post-metadata">

**Author:** ![xgp](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/xgp/32/2589_2.png) [@xgp](https://forum.keycloak.org/u/xgp)\
**Post date:** [June 21, 2022, 12:19pm UTC](https://forum.keycloak.org/t/outsourcing-keycloak-choosing-a-provider/16052/4 "2022-06-21T12:19:07Z")

</div>

The “AWS Keycloak” service isn’t so much a “service” as a set of CDK and CloudFormation templates to spin up a Keycloak instance on your AWS account. They don’t operate it for you, and have no expertise in Keycloak.

IMO, if you are looking for someone to “outsource” your Keycloak deployment to, I would select someone who has expertise and can help you with Keycloak questions.

That said, I have used their templates to help convince customers of “best practices” for infrastructure, and if you want to take on more of the operational responsibility yourself, the templates linked from that article are a decent way to bootstrap your infrastructure quickly. However, keep in mind the defaults they have there are rather expensive (over $1000US per month).

---

<div class="post-metadata">

**Author:** ![rew](https://avatars.discourse-cdn.com/v4/letter/r/ed655f/32.png) [@rew](https://forum.keycloak.org/u/rew)\
**Post date:** [June 21, 2022, 12:23pm UTC](https://forum.keycloak.org/t/outsourcing-keycloak-choosing-a-provider/16052/5 "2022-06-21T12:23:21Z")

</div>

Yes outsourcing is the route. When googling I’d encountered the AWS offering, and lots of PaaS/IaaS services. Since AWS is such a big player in cloud services, I’m curious how anyone has got on using them. It’s helpful to have your other comments too. Thanks Garth.

---

<div class="post-metadata">

**Author:** ![rew](https://avatars.discourse-cdn.com/v4/letter/r/ed655f/32.png) [@rew](https://forum.keycloak.org/u/rew)\
**Post date:** [June 21, 2022, 12:31pm UTC](https://forum.keycloak.org/t/outsourcing-keycloak-choosing-a-provider/16052/6 "2022-06-21T12:31:54Z")

</div>

I appreciate there are huge variables, but in principle how portable is a Keycloak architecture?

Do different Keycloak service providers offer specific features/addons which effectively reduce portability?

I’d like a long term service provider and it’s not an intention to move around, but I’m interested if choosing a service provider is very permanent or more portable. And wishing to know what to consider ie. what are the lock ins or depenancies.

Thank you

---

<div class="post-metadata">

**Author:** ![xgp](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/xgp/32/2589_2.png) [@xgp](https://forum.keycloak.org/u/xgp)\
**Post date:** [June 21, 2022, 7:43pm UTC](https://forum.keycloak.org/t/outsourcing-keycloak-choosing-a-provider/16052/7 "2022-06-21T19:43:11Z")

</div>

Most allow easy export of the Keycloak configuration. Some have addons, but you are not required to use them. I’d check with each provider to determine their commitment to portability.

---

<div class="post-metadata">

**Author:** ![rew](https://avatars.discourse-cdn.com/v4/letter/r/ed655f/32.png) [@rew](https://forum.keycloak.org/u/rew)\
**Post date:** [June 22, 2022, 8:04am UTC](https://forum.keycloak.org/t/outsourcing-keycloak-choosing-a-provider/16052/8 "2022-06-22T08:04:39Z")

</div>

Thank you Garth, that’s helpful to know.
