Software Alternatives & Reviews

Keycloak VS Amazon Cognito

Compare Keycloak VS Amazon Cognito and see what are their differences

Keycloak logo Keycloak

Open Source Identity and Access Management for modern Applications and Services.

Amazon Cognito logo Amazon Cognito

Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily. It scales to millions of users and supports sign-in with social identity providers and enterprise identity providers via SAML 2.0.
  • Keycloak Landing page
    Landing page //
    2022-03-20
  • Amazon Cognito Landing page
    Landing page //
    2023-03-13

Keycloak videos

What is Keycloak and what are the main features | DevNation Live

More videos:

  • Review - Keycloak Overview
  • Review - Easily Secure Your Front and Back End app with Keycloak

Amazon Cognito videos

Amazon Cognito Tutorial - Amazon Cognito User Pools & AWS Amplify Setup

Category Popularity

0-100% (relative to Keycloak and Amazon Cognito)
Identity And Access Management
Identity Provider
40 40%
60% 60
SSO
45 45%
55% 55
Security & Privacy
100 100%
0% 0

User comments

Share your experience with using Keycloak and Amazon Cognito. For example, how are they different and which one is better?
Log in or Post with

Reviews

These are some of the external sources and on-site user reviews we've used to compare Keycloak and Amazon Cognito

Keycloak Reviews

12 User Authentication Platforms [Auth0, Firebase Alternatives]
You can integrate Keycloak with your applications to have a single-sign-in and single-sign-out experience. Moreover, one can activate social logins without any modification in code. Additionally, it allows user authentication via existing OpenID Connect or SAML 2.0
Source: geekflare.com
10+ Open-source Single-Sign On (SSO) Solutions
Keycloak is a free, open-source identity and access management system with highly configurable Single-Sign-On (SSO) support.
Source: medevel.com
10 Best Auth0 Alternatives and Similar Platforms
Keycloak may be quite beneficial because it provides a built-in method for syncing with databases, such as LDAP or Active Directory, when your users already are registered on. If you use Social Login for social platforms such as Facebook, Keycloak might be a great tool for your organization.
Top 5 Open Source Single Sign-On Software In the Year 2021
KeyCloak is another free software that is based on OpenID Connect, OAuth2.0, and SAML2.0. It provides SSO capabilities across web applications and web services. Above all, this open source software provides integrations with LDAP and Active Directory. There is a logical user interface where users can manage roles, permissions, and sessions. Moreover, this free solution...
IAM: A comparison of open-source tools
/ Digitalberry news / IAM: A comparison of open-source toolsIAM: A comparison of open-source toolsWhy use an Identity Provider (IdP)?Comparative study of Identity Providers (IdP)1. Our team’s first choice: Keycloak2. In second place of our comparative study: Gluu3. Special mention: FusionAuthDiscover our expertiseContact our experts

Amazon Cognito Reviews

12 User Authentication Platforms [Auth0, Firebase Alternatives]
Cognito is Amazon’s cloud application authentication solution for the masses. It’s a low code deployment that can be used with conventional passwords or 3rd party logins like Google or Facebook.
Source: geekflare.com
Auth0 Vs cognito
Auth0 is far, far easier to implement. But… it is way more expensive. We started on Auth0 and then switched to Cognito. Cognito has cost us a lot of development time. On the other hand all of our data is collected in a single place, AWS, making it easier to analyze (Cloudwatch alerts).

Social recommendations and mentions

Based on our record, Amazon Cognito seems to be a lot more popular than Keycloak. While we know about 63 links to Amazon Cognito, we've tracked only 4 mentions of Keycloak. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.

Keycloak mentions (4)

  • Beyond the login page
    Most of the time nowadays, I prefer offloading this to an identity provider, using OpenID Connect or soon Federated Credential Management (FedCM), even if that means shipping an identity provider as part of the deliverables (I generally go with Keycloak, with keycloak-config-cli to provision its configuration). I'm obviously biased though as I work in IT services, developping software mainly for... - Source: dev.to / 5 months ago
  • Okta Says Hackers Stole Data for All Customer Support Users
    Yet another breach of Okta... Why are companies not running something like keycloak [1] themselves? Are administrative/maintenance costs too high or is it plausible deniability? [1] https://keycloak.org. - Source: Hacker News / 5 months ago
  • I built a ready-to-use auth server with TypeScript and Express.js
    I'd stick with a solution like https://keycloak.org in that instance. Source: about 1 year ago
  • Authelia is an open-source authentication/authorization server with 2FA/SSO
    A few more projects in this space: - Keycloak (you won't get fired for picking this)[0] - CloudFoundry's UAA[1] - Gluu [2] - Keratin [3] - OpenUnison [4] - Dex[5] - Netlify's GoTrue[6] All of these solutions are a bit different but here are some of the axes: - Whether or not they function as an OAuth provider - Whether they're centered around application-user-login (email + password) or application auth (OAuth) or... - Source: Hacker News / about 3 years ago

Amazon Cognito mentions (63)

  • My Past 1 Year+ with AWS Cognito
    I’ve heard some people complain about AWS Cognito’s complexity, but I’ve had the opposite experience. I’ve never done on-boarding before, and every project I’ve ever been on, or near, on-boarding was always a horror show, both in UI, ability to debug, and stability. - Source: dev.to / about 1 month ago
  • How to Deploy and Secure a Next.js API on AWS
    After setting up an Amplify app, the next step is to add authentication to the project. Writing the logic for an application's login flow can be challenging and time-consuming. You are responsible for handling tokens correctly, managing user sessions, and storaing user details. However, Amplify simplifies this process by providing a complete authentication solution, which uses Amazon Cognito under the hood, that... - Source: dev.to / 3 months ago
  • Free auth products you can start using today
    Building auth for your SaaS product shouldn't be hard. Try these free solutions for your next project 👇 Http://supabase.com/auth Free up to 50k users/month Http://firebase.google.com/products/auth Free up to 50k users/month Http://aws.amazon.com/cognito Free up to 50k users/month Http://clerk.com Free up to 10k users/month Http://kinde.com Free up to 7.5k users/month Https://www.descope.com Free up to... Source: 5 months ago
  • Solo SaaS - How I Built a Serverless Workout App By Myself
    The app uses Amazon Cognito to authenticate users via Google. This was probably the hardest part of the entire project - setting up and configuring the resources necessary to get a Cognito user pool wired up to Google. I kept the Cognito resources in a SAM template separate from the user interface to allow me to iterate on the back-end and UI separately. - Source: dev.to / 9 months ago
  • How to Protect Next.js 13 App Routes with Authentication
    Adding authentication to your app enables users to create accounts, sign in, and ensures that only authorized users can access your app. Writing the logic for an application's login flow can be challenging and time-consuming. However, Amplify simplifies this process by providing a complete authentication solution with Amazon Cognito that can be easily added to your app. - Source: dev.to / 9 months ago
View more

What are some alternatives?

When comparing Keycloak and Amazon Cognito, you can also consider the following products

Auth0 - Auth0 is a program for people to get authentication and authorization services for their own business use.

Okta - Enterprise-grade identity management for all your apps, users & devices

OneLogin - On-demand SSO, directory integration, user provisioning and more

Microsoft Azure Active Directory - Azure Active Directory is a comprehensive identity and access management cloud solution that provides a robust set of capabilities to manage users and groups and help secure access to applications including Microsoft online services like Office 365 …

Ping Identity - Ping Identity provides cloud-based, single sign-on and identity management solutions with their SAML SSO.

FusionAuth - FusionAuth is a CIAM platform that is 100% free for unlimited users.