The safeguards map / 3.6 Identity and authorization

Keycloak

Cloud Native Computing Foundation (foundation). CNCF, incubating. Apache-2.0. Mapped; as of .

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

An identity and access management server that authenticates users and services and evaluates fine-grained authorization policies for the resources it protects.

Where it sits

3.6 Identity and authorization (primary): Authenticates users and services as a single sign-on server and evaluates authorization policies through a policy decision point that resource servers enforce.

Keycloak is a single sign on solution for web apps and RESTful web services.

captured

Keycloak supports fine-grained authorization policies and is able to combine different access control mechanisms such as:

captured

Provides a distributable policy decision point to where authorization requests are sent and policies are evaluated accordingly with the permissions being requested.

captured

Facts

Concern
security
Names the law
no
Subject
software
Used by
those who run it
Runs
at runtime
Policy comes from
owner-entered settings

Handoffs

None recorded. A mapped entry with no handoff is here for its foundation home.

Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.