Keyrock Identity Manager

Open Source Identity
Management Tool

Get Started

Facilitate authentication and access management of smart applications.

Keyrock, combined with Wilma and AuthZforce, brings support to secure and private authentication of users and devices.

This project is part of FIWARE.
For more information check the FIWARE Catalogue entry for Security

Keyrock provides

single sign-on icon

Single Sign On

Unique authentication point for services and applications
openiD Connect icon

OAuth2.0 and OpenID Connect

Delegated authentication and JWT support
authentication icon

Two Factor Authentication

Add extra security layer for user authentication
External authentication icon

External authentication (LDAP & SQL)

Authenticate users against an existing and external database
Openstack icon

Driver connection compatibility with Keystone DB (Openstack)

eIDAS icon

eIDAS Integration

SAML authentication using electronic IDentifier
Fiware icon

Policy Administration Point (PAP)

Supporting ABAC, RBAC and Usage Control Policies (UCON)
Fiware icon

Policy Enforcement Point (PEP) compatibility

Compatibility with Wilma GE for validating OAuth 2.0, OIDC, JWT and Keystone tokens
Fiware icon

Policy Decision Point (PDP)

Build-in PDP and compatibility with AuthZForce and XACML v3.0
Openstack icon

Easy deployment

From source or with Docker
Fiware icon

High Performance

Based on Node.js and Express
Fiware icon

Relational data bases support

MySQL and PostgreSQL
Themes icon

Themes

Customize your login page
Identity Attributes icon

Identity Attributes

Customizable user attributes to enhance service's user experience
Fiware icon

Fiware-service compatibility