# Keycloak vs OneLogin

| Attribute | Keycloak | OneLogin |
|---|---|---|
| **vioscaleAI score** | 65.6 (47% (low)) | 68.8 (72% (medium)) |
| activity.commits_last_30d | 100 | - |
| adoption.dependent_repos | 1,477 | - |
| adoption.github_stars | 36,638 | - |
| adoption.package_downloads_weekly | 1,713,825 | - |
| content.faq | `[{"answer":"Centralized authentication and authorization platform that manages user identity and access control across applications, reducing the need for individual apps to build their own login systems. It is indexed under Auth & Identity Software.","source":"https://www.keycloak.org","question":"What is Keycloak?","confidence":0.6},{"answer":"Keycloak is open source, so it can be self-hosted and used at no licence cost. It is released under the Apache-2.0 licence. Pricing changes often, so verify at source before relying on it.","source":"https://www.keycloak.org","question":"Is Keycloak free to use?","confidence":0.6},{"answer":"Keycloak supports the web, Windows, Linux and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://www.keycloak.org","question":"What platforms does Keycloak support?","confidence":0.6},{"answer":"Yes. Keycloak can be deployed on-premise and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://www.keycloak.org","question":"Can Keycloak be self-hosted?","confidence":0.6},{"answer":"We have confirmed 10 integrations for Keycloak, including GitHub, Google, Facebook, Twitter, LDAP, Active Directory, Kerberos and Kubernetes, plus 2 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://www.keycloak.org","question":"What does Keycloak integrate with?","confidence":0.6},{"answer":"Yes. Keycloak is published under the Apache-2.0 licence, a permissive licence that generally allows commercial use and modification. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/keycloak/keycloak","question":"Is Keycloak open source?","confidence":0.95}]` | `[{"answer":"Market-leading identity and access management (IAM) platform providing extensible solutions that secure human and machine identities for workforces, customers, and partners. It is indexed under IAM SSO.","source":"https://www.onelogin.com","question":"What is OneLogin?","confidence":0.6},{"answer":"OneLogin is a paid product; published pricing starts at $3 per user per month. It is sold across 4 plans (Basic Authentication, Essentials, Business and Enterprise). There is no free tier. Prices are published openly on the vendor's own pricing page. Pricing changes often, so verify at source before relying on it.","source":"https://www.onelogin.com","question":"How much does OneLogin cost?","confidence":0.6},{"answer":"We have confirmed browser-based access to OneLogin. That is the extent of what we could verify from public sources, so it may well offer desktop or mobile clients we have not indexed.","source":"https://www.onelogin.com","question":"What platforms does OneLogin support?","confidence":0.6},{"answer":"We have only confirmed a cloud / SaaS deployment for OneLogin, so it appears to be vendor-hosted. If a self-hosted option exists we have not found it documented publicly.","source":"https://www.onelogin.com","question":"Can OneLogin be self-hosted?","confidence":0.6},{"answer":"We have confirmed 6 integrations for OneLogin, including Workday, Salesforce, Office 365, G Suite, Oracle EBS and Peoplesoft. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://www.onelogin.com","question":"What does OneLogin integrate with?","confidence":0.6},{"answer":"We have independently confirmed SOC 2, ISO 27001, HIPAA and GDPR for OneLogin. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as OneLogin not holding them. Always confirm compliance directly before you rely on it.","source":"https://www.onelogin.com/security","question":"What security certifications does OneLogin have?","confidence":0.7}]` |
| deployment.options | `{"on_prem":true,"self_hosted":true}` | `{"cloud":true}` |
| description.long | Centralized authentication and authorization platform that manages user identity and access control across applications, reducing the need for individual apps to build their own login systems. | Market-leading identity and access management (IAM) platform providing extensible solutions that secure human and machine identities for workforces, customers, and partners. |
| features.capabilities | `{"mfa":true,"oidc":true,"rbac":true,"hosting":"both","saml_sso":true,"hosted_ui":"both","open_source":true,"passwordless":true,"social_login":true,"b2b_multi_tenant":true,"passkeys_webauthn":true,"scim_provisioning":true}` | `{"mfa":true,"pam":true,"sso":true,"deployment":"cloud","adaptive_auth":true,"directory_service":true,"scim_provisioning":true,"standards_breadth":"SAML, OIDC, WebAuthn, LDAP, RADIUS, VLDAP","identity_governance":true,"integration_catalog":"OneLogin App Catalog with prebuilt integrations to enterprise applications"}` |
| integrations.count | 7 | 6 |
| integrations.list | `[{"name":"GitHub"},{"name":"Google"},{"name":"Facebook"},{"name":"Twitter"},{"name":"LDAP"},{"name":"Active Directory"},{"name":"Kerberos"},{"name":"Kubernetes"},{"name":"Apache APISIX"},{"name":"OpenTelemetry"}]` | `[{"name":"Workday"},{"name":"Salesforce"},{"name":"Office 365"},{"name":"G Suite"},{"name":"Oracle EBS"},{"name":"Peoplesoft"}]` |
| language.primary | Java | - |
| license.spdx | Apache-2.0 | - |
| market.availability | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | - |
| platform.support | `{"cli":true,"web":true,"linux":true,"windows":true}` | `{"web":true}` |
| pricing | `{"type":"open_source","sourceUrl":"https://www.keycloak.org","retrievedAt":"2026-09-07T13:10:46.299Z"}` | `{"type":"subscription","plans":[{"free":false,"name":"Basic Authentication","summary":"$3/user/month","features":["Single Sign-On (SSO)","Multi-Factor Authentication (MFA)","Desktop","Basic Identity Lifecycle Management (5 apps)"],"commitment":"monthly","components":[{"kind":"per_unit","unit":"seat","amount":3,"period":"month","currency":"USD"}],"description":"Limited user management with core authentication","contactSales":false,"includedLimits":{"apps":"5"}},{"free":false,"name":"Essentials","summary":"$6/user/month","features":["Single Sign-On (SSO)","Multi-Factor Authentication (MFA)","Desktop","Unlimited Identity Lifecycle Management","Advanced Directory"],"commitment":"monthly","components":[{"kind":"per_unit","unit":"seat","amount":6,"period":"month","currency":"USD"}],"description":"All Basic features plus unlimited identity lifecycle management","contactSales":false},{"free":false,"name":"Business","summary":"$10/user/month","features":["All Essential Plan Features","SmartFactor Authentication","Desktop MFA","HR Directories","RADIUS","VLDAP","Smart Hooks","Custom REST Connectors"],"commitment":"monthly","components":[{"kind":"per_unit","unit":"seat","amount":10,"period":"month","currency":"USD"}],"description":"Advanced authentication, user management automation, and HR integration","contactSales":false},{"free":false,"name":"Enterprise","summary":"Custom pricing","features":["All Business Plan Features","LDAP Directory Sync","Delegated Administration","Multiple Brands","API Access Management"],"description":"Advanced features with LDAP sync, delegated administration, and API access","contactSales":true}],"summary":"From $3/user/month. Enterprise pricing available by contact.","currency":"USD","freeTier":false,"sourceUrl":"https://www.onelogin.com","retrievedAt":"2026-08-03T11:48:54.482Z","startingPrice":{"amount":3,"period":"month","currency":"USD"},"billingPeriods":["month"]}` |
| pricing.free_tier | yes | no |
| pricing.model | open_source | commercial |
| pricing.price_level | free | low |
| pricing.transparent | yes | yes |
| release.cadence_days | 13 | - |
| release.history | `[{"url":"https://github.com/keycloak/keycloak/releases/tag/nightly","date":"2022-09-27T02:22:00Z","type":"prerelease","version":"nightly"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.7.3","date":"2026-08-31T09:29:37Z","type":"stable","version":"26.7.3"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.7.2","date":"2026-08-19T05:26:20Z","type":"stable","version":"26.7.2"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.7.1","date":"2026-08-05T15:54:37Z","type":"stable","version":"26.7.1"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.7.0","date":"2026-07-09T06:58:13Z","type":"stable","version":"26.7.0"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.6.4","date":"2026-06-26T19:19:51Z","type":"stable","version":"26.6.4"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.6.3","date":"2026-06-04T17:00:13Z","type":"stable","version":"26.6.3"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.6.2","date":"2026-05-19T12:41:03Z","type":"stable","version":"26.6.2"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.6.1","date":"2026-04-15T13:58:02Z","type":"stable","version":"26.6.1"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.6.0","date":"2026-04-08T08:54:19Z","type":"stable","version":"26.6.0"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.7","date":"2026-04-02T14:47:13Z","type":"stable","version":"26.5.7"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.6","date":"2026-03-19T06:45:39Z","type":"stable","version":"26.5.6"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.5","date":"2026-03-05T15:40:30Z","type":"stable","version":"26.5.5"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.4","date":"2026-02-20T09:19:45Z","type":"stable","version":"26.5.4"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.3","date":"2026-02-10T07:30:08Z","type":"stable","version":"26.5.3"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.2","date":"2026-01-23T14:26:58Z","type":"stable","version":"26.5.2"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.1","date":"2026-01-14T18:09:13Z","type":"stable","version":"26.5.1"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.0","date":"2026-01-06T07:42:32Z","type":"stable","version":"26.5.0"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.4.7","date":"2025-12-01T08:14:11Z","type":"stable","version":"26.4.7"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.4.6","date":"2025-11-25T17:32:43Z","type":"stable","version":"26.4.6"}]` | - |
| reliability.status_page | - | yes |
| security.disclosure_policy | yes | - |
| security.gdpr | - | yes |
| security.hipaa | - | yes |
| security.iso27001 | - | yes |
| security.scorecard | 8 | - |
| security.soc2 | - | yes |
| security.trust_center | https://www.keycloak.org/security | - |
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=maven&package_name=org.keycloak%3Akeycloak-spring-boot-starter&per_page=100","last_12m":0,"max_severity":null}` | - |

*Source: vioscaleAI. Generated 2026-09-21T03:36:23.360Z. "-" = undocumented, not absent.*