Keycloak – Open-Source Identity and Access Management Interview

Re:Keycloak – Open-Source Identity and Access Management Int... by rad_gruchalski on Sunday June 18, 2023 @06:16PM (#36385113)

Ory Kratos is nowhere near Keycloak. First of all, one needs at least Kratos+Hydra (there’s an integration method now out of the box yay) but Keycloak still has a flexibility advantage. Keycloak has many more features out of the box comparing to the complete Ory stack.

The only thing nicer in Kratos from Keycloak is the standalone self-service UI with JSON identity declaration. If someone from the Keycloak team is reading this, please, let’s have a talk about bringing that feature to Keycloak, then Keycloak will be perfect. The template approach is a bit of a hassle.

Source: deployed both stacks in production systems.

[ Parent | on HN ]

Re:Keycloak – Open-Source Identity and Access Management Int... by mnming on Wednesday June 21, 2023 @05:19AM (#36416267)

Another significant advantage of Kratos is that it's written in Golang, so it takes little to none resources for simple use cases.

Also my experience with Keycloak in the past was that you can't do zero downtime deployment, or true configuration as code.

[ Parent | on HN ]