Skycloak

About Skycloak

Skycloak is managed Keycloak with the pricing model deliberately inverted from the identity market it competes in. Auth0, Okta, Stytch and FusionAuth meter on monthly active users, which means an identity bill scales with product success and an SSO requirement often arrives as a tier jump; Skycloak charges for infrastructure — clusters — and includes unlimited users on every plan, with no MAU tax and no SSO tax. For a B2B product whose seat count grows faster than its revenue per seat, that is a materially different cost curve rather than a marketing line. What is managed is real Keycloak with full admin access, so the whole feature surface comes along: SSO, multi-factor auth, SAML, social login, passwordless, role-based access control, SCIM provisioning, identity-provider federation, audit logs and session management. The developer surface is the part that will interest an agent-shaped workflow: alongside a REST API and a Terraform provider for managing realms as code, Skycloak ships an MCP server for administering Keycloak from an AI assistant, which is a genuinely uncommon capability in identity infrastructure. A free tools cluster — JWT decoder, JWKS verifier, SAML decoder, Docker Compose generator, realm-config generator, SCIM tester, ROI and pricing calculators — doubles as the acquisition channel. Compliance posture is SOC 2 Type II, ISO 27001 and GDPR, with eleven verified extensions, custom domains and theming available above the entry tier.

Key Features

Tags