Keycloak is fantastic. You want 2FA? Password expiry? SSO? Keycloak does it all. I can't imagine starting any product now without considering Keycloak.

Also have huge extensive experience with keycloak and highly recommend it. It’s best when used as a custom docker container (so you can add your certs) but I’ve used it to build enterprise-wide auth, department level permissions and authorization, product level auth, and even SSO to AWS console.

I wish keycloak has smaller memory footprint so I can cram it in a small vps together with other small webapps. Other than that it's excellent.

There's a Quarkus-based build of Keycloak called Keycloak.X that seems to significantly improve this: https://www.keycloak.org/2020/12/first-keycloak-x-release.ad...

Oh wow, I should try this version. Thanks!

Yeah, first time I tried to start it i set 128mb limit and got nothing at all, was a little surprised