Software Alternatives & Reviews

Apache Shiro VS Keycloak

Compare Apache Shiro VS Keycloak and see what are their differences

Apache Shiro logo Apache Shiro

Apache Shiro is a Java security framework that performs authentication, authorization, cryptography, and session management.

Keycloak logo Keycloak

Open Source Identity and Access Management for modern Applications and Services.
  • Apache Shiro Landing page
    Landing page //
    2022-04-05
  • Keycloak Landing page
    Landing page //
    2022-03-20

Apache Shiro videos

No Apache Shiro videos yet. You could help us improve this page by suggesting one.

+ Add video

Keycloak videos

What is Keycloak and what are the main features | DevNation Live

More videos:

  • Review - Keycloak Overview
  • Review - Easily Secure Your Front and Back End app with Keycloak

Category Popularity

0-100% (relative to Apache Shiro and Keycloak)
Development Tools
100 100%
0% 0
Identity And Access Management
Javascript UI Libraries
100 100%
0% 0
Identity Provider
0 0%
100% 100

User comments

Share your experience with using Apache Shiro and Keycloak. For example, how are they different and which one is better?
Log in or Post with

Reviews

These are some of the external sources and on-site user reviews we've used to compare Apache Shiro and Keycloak

Apache Shiro Reviews

We have no reviews of Apache Shiro yet.
Be the first one to post

Keycloak Reviews

12 User Authentication Platforms [Auth0, Firebase Alternatives]
You can integrate Keycloak with your applications to have a single-sign-in and single-sign-out experience. Moreover, one can activate social logins without any modification in code. Additionally, it allows user authentication via existing OpenID Connect or SAML 2.0
Source: geekflare.com
10+ Open-source Single-Sign On (SSO) Solutions
Keycloak is a free, open-source identity and access management system with highly configurable Single-Sign-On (SSO) support.
Source: medevel.com
10 Best Auth0 Alternatives and Similar Platforms
Keycloak may be quite beneficial because it provides a built-in method for syncing with databases, such as LDAP or Active Directory, when your users already are registered on. If you use Social Login for social platforms such as Facebook, Keycloak might be a great tool for your organization.
Top 5 Open Source Single Sign-On Software In the Year 2021
KeyCloak is another free software that is based on OpenID Connect, OAuth2.0, and SAML2.0. It provides SSO capabilities across web applications and web services. Above all, this open source software provides integrations with LDAP and Active Directory. There is a logical user interface where users can manage roles, permissions, and sessions. Moreover, this free solution...
IAM: A comparison of open-source tools
/ Digitalberry news / IAM: A comparison of open-source toolsIAM: A comparison of open-source toolsWhy use an Identity Provider (IdP)?Comparative study of Identity Providers (IdP)1. Our team’s first choice: Keycloak2. In second place of our comparative study: Gluu3. Special mention: FusionAuthDiscover our expertiseContact our experts

Social recommendations and mentions

Based on our record, Keycloak should be more popular than Apache Shiro. It has been mentiond 4 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.

Apache Shiro mentions (2)

  • Serverless Apache Zeppelin on AWS
    The only missing feature in this architecture is the login and logout capability. In this case, Apache Zeppelin provides Shiro for notebook authentication. Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. Here, you can find a step-by-step guide about how Shiro works. This example uses the default configuration. - Source: dev.to / 3 months ago
  • Libraries, Frameworks and Technologies you would NOT recommend
    Apache Shiro is another security framework. I haven't tried it out myself, but I was sorely tempted to when trying to set up Spring Security. Source: about 3 years ago

Keycloak mentions (4)

  • Beyond the login page
    Most of the time nowadays, I prefer offloading this to an identity provider, using OpenID Connect or soon Federated Credential Management (FedCM), even if that means shipping an identity provider as part of the deliverables (I generally go with Keycloak, with keycloak-config-cli to provision its configuration). I'm obviously biased though as I work in IT services, developping software mainly for... - Source: dev.to / 5 months ago
  • Okta Says Hackers Stole Data for All Customer Support Users
    Yet another breach of Okta... Why are companies not running something like keycloak [1] themselves? Are administrative/maintenance costs too high or is it plausible deniability? [1] https://keycloak.org. - Source: Hacker News / 5 months ago
  • I built a ready-to-use auth server with TypeScript and Express.js
    I'd stick with a solution like https://keycloak.org in that instance. Source: about 1 year ago
  • Authelia is an open-source authentication/authorization server with 2FA/SSO
    A few more projects in this space: - Keycloak (you won't get fired for picking this)[0] - CloudFoundry's UAA[1] - Gluu [2] - Keratin [3] - OpenUnison [4] - Dex[5] - Netlify's GoTrue[6] All of these solutions are a bit different but here are some of the axes: - Whether or not they function as an OAuth provider - Whether they're centered around application-user-login (email + password) or application auth (OAuth) or... - Source: Hacker News / about 3 years ago

What are some alternatives?

When comparing Apache Shiro and Keycloak, you can also consider the following products

jQuery - The Write Less, Do More, JavaScript Library.

Auth0 - Auth0 is a program for people to get authentication and authorization services for their own business use.

React Native - A framework for building native apps with React

Okta - Enterprise-grade identity management for all your apps, users & devices

Apache Zeppelin - A web-based notebook that enables interactive data analytics.

OneLogin - On-demand SSO, directory integration, user provisioning and more