cleanyourtv-app
A community-built phone app for Clean Your TV: clean up an Android TV from your phone. No laptop, no coding agent, nothing uninstalled.
Ranked catalog of Keycloak extensions (SPI) and tools: official list + popular community projects.
Translation pending
OtherHTML · PythonGitHub @tutttuwiOnlineOwner unconfirmed
Have you tried it? One tap is enough. No sign-in needed.
No updates detected yet. GitHub releases will appear here.
Owners of public repositories under a personal GitHub account can sign in to verify ownership and manage the introduction themselves. No administrator approval is needed.
Sign in, generate a verification file, and commit it to this repository’s default branch within 30 minutes. Files on other branches or forks do not count. Then check the file below to manage the project without administrator approval. Keep the file to retain your access.
If needed, you will go to sign-in. After signing in, return here and press your chosen verification button again.
Run /nomorevibe verify in your project folder to verify ownership and manage the introduction yourself.
Verify in one minuteAsk about other verification options
The maker's introduction consists of the line above. Read the repository README for more details. Repository README ↗
Loading the full README.
Read the full README ↗A curated, ranked catalog of Keycloak extensions (SPI implementations) and companion tools — official-list entries plus popular community projects.
Keycloakの拡張(SPI実装)と周辺ツールを、公式掲載分+人気のコミュニティ製も含めてランキング形式でまとめたカタログです。
Browse / filter / search: http://noccalabs.com/awesome-keycloak-extensions/
Data fetched: 2026-10-26 (README generated 2026-10-26). Stars/forks/last commit come from the GitHub API;
unknown= not fetched yet (never guessed). Official list: https://www.keycloak.org/extensions
Activity: Active ≤12 months · Stale 12–24 months · Inactive >24 months / archived / "no longer maintained" · Unknown = last commit not fetched yet.
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | keycloak-metrics-spican / cannot | Exposes Keycloak metrics (Prometheus format) via an SPI.KeycloakのメトリクスをPrometheus形式で公開するSPI | 614 | 2024-11-08 | Stale | 26.0.0 | Apache-2.0 | Official |
| 2 | keycloak-orgscan / cannot | Organizations / multi-tenancy for Keycloak realms.Keycloakの組織・マルチテナント機能 | 544 | 2026-10-14 | Active | 26.8.0 | Elastic-2.0 | Official |
| 3 | keycloak-restrict-client-authcan / cannot | Restrict which users may access which clients (role/policy based).クライアント単位でユーザーのアクセスを制限 | 440 | 2026-10-14 | Active | 26.8.0 | MIT | Official |
| 4 | keycloak-extensions-democan / cannot | Demo of many SPI types: action token, authenticators, event listener, token mapper, required action, etc.多数のSPI実装例(actiontoken/authenticator/event-listener/tokenmapper/requiredaction等) | 434 | 2026-10-14 | Active | nightly | Apache-2.0 | Official |
| 5 | keycloak-magic-linkcan / cannot | Passwordless magic-link login.マジックリンク(パスワードレス)認証 | 430 | 2026-10-20 | Active | 26.8.0 | Other (see repo) | Official |
| 6 | keycloak-home-idp-discoverycan / cannot | Discover the home IdP from the user's email domain.メールドメインからホームIdPを自動判定 | 341 | 2026-10-02 | Active | 26.8.0 | MIT | Official |
| 7 | keycloak-eventscan / cannot | Event listeners and webhooks for Keycloak events.Keycloakイベント用のリスナー/Webhook | 317 | 2026-10-15 | Active | 26.8.0 | Other (see repo) | Official |
| 8 | keycloak-mfa-pluginscan / cannot | MFA plugins: SMS, enforced MFA, native-app MFA.MFAプラグイン集(SMS/強制MFA/ネイティブアプリMFA) | 300 | 2026-10-13 | Active | 26.8.0 | Apache-2.0 | Official |
| 9 | apple-identity-provider-keycloakcan / cannot | Sign in with Apple identity provider.Sign in with Apple用Identity Provider | 297 | 2026-01-18 | Active | unknown | Apache-2.0 | Official |
| 10 | keycloak-2fa-email-authenticatorcan / cannot | Email OTP second-factor authenticator.メールOTPによる二要素認証 | 289 | 2026-10-23 | Active | 26.7.3 | Apache-2.0 | Community |
| 11 | keycloak-multi-tenancycan / cannot | Multi-tenancy support for Keycloak.Keycloakのマルチテナント対応 | 171 | 2025-12-12 | Active | 26.3.1 | Apache-2.0 | Official |
| 12 | keycloak-discordcan / cannot | Discord identity provider.Discord用Identity Provider | 158 | 2024-11-02 | Stale | 26.0.5 | Apache-2.0 | Official |
| 13 | keycloak-protocol-cascan / cannot | CAS protocol support for Keycloak.KeycloakにCASプロトコルを追加 | 131 | 2026-10-13 | Active | unknown | Apache-2.0 | Official |
| 14 | keycloak-providercan / cannot | OTP / 2FA via a privacyIDEA server.privacyIDEA連携のOTP二要素認証 | 131 | 2026-07-01 | Active | 26.5.6 | Apache-2.0 | Official |
| 15 | keycloak-webhookcan / cannot | Send Keycloak events to webhooks (HTTP, AMQP, Syslog).KeycloakイベントをWebhook等へ送信 | 114 | 2026-07-26 | Active | unknown | MIT | Community |
| 16 | Keycloak-FranceConnectcan / cannot | FranceConnect / ProConnect identity providers.FranceConnect/ProConnect用Identity Provider | 107 | 2026-09-10 | Active | 26.7.2 | MIT | Official |
| 17 | keycloak-adaptive-authncan / cannot | Risk-based / adaptive authentication.リスクベース(アダプティブ)認証 | 105 | 2026-07-28 | Active | nightly | Apache-2.0 | Official |
| 18 | keycloak-scim-servercan / cannot | SCIM server implemented as a Keycloak extension.KeycloakにSCIMサーバーを追加する拡張 | 95 | 2026-10-07 | Active | unknown | Apache-2.0 | Official |
| 19 | keycloak-phone-numbercan / cannot | Log in with a phone number and SMS OTP.電話番号+SMS OTPでログイン | 55 | 2026-07-24 | Active | 26.5.2 | MIT | Community |
| 20 | keycloak-custom-event-listenercan / cannot | Example event listener that forwards user create/register events to an API.ユーザー作成/登録イベントを外部APIへ送るリスナー例 | 55 | 2024-11-05 | Stale | unknown | Apache-2.0 | Community |
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | keycloak-magic-linkcan / cannot | Passwordless magic-link login.マジックリンク(パスワードレス)認証 | 430 | 2026-10-20 | Active | 26.8.0 | Other (see repo) | Official |
| 2 | keycloak-home-idp-discoverycan / cannot | Discover the home IdP from the user's email domain.メールドメインからホームIdPを自動判定 | 341 | 2026-10-02 | Active | 26.8.0 | MIT | Official |
| 3 | keycloak-adaptive-authncan / cannot | Risk-based / adaptive authentication.リスクベース(アダプティブ)認証 | 105 | 2026-07-28 | Active | nightly | Apache-2.0 | Official |
| 4 | keycloak-phone-numbercan / cannot | Log in with a phone number and SMS OTP.電話番号+SMS OTPでログイン | 55 | 2026-07-24 | Active | 26.5.2 | MIT | Community |
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | keycloak-mfa-pluginscan / cannot | MFA plugins: SMS, enforced MFA, native-app MFA.MFAプラグイン集(SMS/強制MFA/ネイティブアプリMFA) | 300 | 2026-10-13 | Active | 26.8.0 | Apache-2.0 | Official |
| 2 | keycloak-2fa-email-authenticatorcan / cannot | Email OTP second-factor authenticator.メールOTPによる二要素認証 | 289 | 2026-10-23 | Active | 26.7.3 | Apache-2.0 | Community |
| 3 | keycloak-providercan / cannot | OTP / 2FA via a privacyIDEA server.privacyIDEA連携のOTP二要素認証 | 131 | 2026-07-01 | Active | 26.5.6 | Apache-2.0 | Official |
| 4 | keycloak-extension-qr-code-executioncan / cannot | Sign in from another device by scanning a QR code.QRコードで別端末からサインイン | 14 | 2026-06-13 |
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | keycloak-eventscan / cannot | Event listeners and webhooks for Keycloak events.Keycloakイベント用のリスナー/Webhook | 317 | 2026-10-15 | Active | 26.8.0 | Other (see repo) | Official |
| 2 | keycloak-webhookcan / cannot | Send Keycloak events to webhooks (HTTP, AMQP, Syslog).KeycloakイベントをWebhook等へ送信 | 114 | 2026-07-26 | Active | unknown | MIT | Community |
| 3 | keycloak-custom-event-listenercan / cannot | Example event listener that forwards user create/register events to an API.ユーザー作成/登録イベントを外部APIへ送るリスナー例 | 55 | 2024-11-05 | Stale | unknown | Apache-2.0 | Community |
| 4 | keycloak-event-enrichmentcan / cannot | Enrich authentication events with GeoIP and User-Agent data.認証イベントにGeoIP/User-Agent情報を付与 | 1 | 2026-09-02 |
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | apple-identity-provider-keycloakcan / cannot | Sign in with Apple identity provider.Sign in with Apple用Identity Provider | 297 | 2026-01-18 | Active | unknown | Apache-2.0 | Official |
| 2 | keycloak-discordcan / cannot | Discord identity provider.Discord用Identity Provider | 158 | 2024-11-02 | Stale | 26.0.5 | Apache-2.0 | Official |
| 3 | Keycloak-FranceConnectcan / cannot | FranceConnect / ProConnect identity providers.FranceConnect/ProConnect用Identity Provider | 107 | 2026-09-10 | Active | 26.7.2 | MIT | Official |
| 4 | keycloak-extension-bundidcan / cannot | BundID (German federal ID) SAML identity provider.ドイツBundID用SAML Identity Provider | 40 | 2026-10-23 | Active |
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | keycloak-protocol-cascan / cannot | CAS protocol support for Keycloak.KeycloakにCASプロトコルを追加 | 131 | 2026-10-13 | Active | unknown | Apache-2.0 | Official |
| 2 | Keycloak-WS-Federationcan / cannot | WS-Federation 1.2 protocol and identity broker.WS-Federation 1.2プロトコル/ブローカー | 3 | 2026-10-17 | Active | 26.7.0 | AGPL-3.0 | Official |
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | keycloak-external-claim-mappercan / cannot | Protocol mapper that adds data from a remote service to the JWT.外部サービスのデータをJWTに追加 | 15 | 2025-07-03 | Stale | 25.0.0 | Apache-2.0 | Official |
| 2 | keycloak-rest-claim-mappercan / cannot | OIDC/SAML mapper that enriches tokens from a REST API.REST APIの値でトークンを拡充するマッパー | 2 | 2026-08-19 | Active | 26.7.1 | Apache-2.0 | Official |
| 3 | keycloak-filtered-group-membership-mappercan / cannot | Group membership mapper with filtering.フィルタ付きグループメンバーシップマッパー | 2 | 2026-04-21 | Active | 26.6.0 | Other (see repo) | Official |
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | Keycloak-PII-Data-Encryption-Providercan / cannot | Encrypt PII user attributes at rest.ユーザー属性(個人情報)を暗号化して保存 | 39 | 2025-09-02 | Stale | 26.3.3 | Apache-2.0 | Official |
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | keycloak-scim-servercan / cannot | SCIM server implemented as a Keycloak extension.KeycloakにSCIMサーバーを追加する拡張 | 95 | 2026-10-07 | Active | unknown | Apache-2.0 | Official |
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | keycloak-orgscan / cannot | Organizations / multi-tenancy for Keycloak realms.Keycloakの組織・マルチテナント機能 | 544 | 2026-10-14 | Active | 26.8.0 | Elastic-2.0 | Official |
| 2 | keycloak-multi-tenancycan / cannot | Multi-tenancy support for Keycloak.Keycloakのマルチテナント対応 | 171 | 2025-12-12 | Active | 26.3.1 | Apache-2.0 | Official |
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | keycloak-restrict-client-authcan / cannot | Restrict which users may access which clients (role/policy based).クライアント単位でユーザーのアクセスを制限 | 440 | 2026-10-14 | Active | 26.8.0 | MIT | Official |
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | keycloak-login-notificationcan / cannot | Email users when a new login session is created.新規ログイン時にセキュリティ通知メールを送信 | 1 | 2026-07-21 | Active | 26.7.0 | Other (see repo) | Official |
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | keycloak-shadcncan / cannot | Keycloakify + shadcn/ui login theme starter.Keycloakify+shadcn/uiのログインテーマ | 17 | 2026-08-07 | Active | unknown | MIT | Official |
| 2 | keycloak-configurable-themecan / cannot | One configurable login theme for all realms.全realm共通の設定可能なログインテーマ | 1 | 2026-10-08 | Active | 26.8.0 | Apache-2.0 | Official |
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | keycloak-metrics-spican / cannot | Exposes Keycloak metrics (Prometheus format) via an SPI.KeycloakのメトリクスをPrometheus形式で公開するSPI | 614 | 2024-11-08 | Stale | 26.0.0 | Apache-2.0 | Official |
| 2 | keycloak-account-eventscan / cannot | Let users read their own login history.ユーザー自身がログイン履歴を参照できる | 0 | 2026-09-02 | Active | 26.7.2 | Apache-2.0 | Official |
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | keycloak-cassandra-extensioncan / cannot | Store Keycloak data in Apache Cassandra.KeycloakのデータをApache Cassandraに保存 | 28 | 2026-10-19 | Active | 26.8.1 | Apache-2.0 | Official |
| 2 | keycloak-secrets-vault-providercan / cannot | Vault SPI provider for OpenBao / HashiCorp Vault secrets.OpenBao/HashiCorp Vault用Vault SPI | 12 | 2026-10-19 | Active | 26.8.1 | Apache-2.0 | Official |
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | Keycloak-GeoAwarecan / cannot | Geolocation-aware login checks and alerts.位置情報に基づくログイン検査・通知 | 22 | 2026-07-22 | Active | 26.7.0 | Apache-2.0 | Official |
| 2 | keycloak-block-disposable-emailcan / cannot | Block registrations with disposable email addresses.使い捨てメールアドレスでの登録をブロック | 12 | 2025-06-16 | Stale | 26.2.5 | Apache-2.0 | Official |
| 3 | keycloak-alias-guardcan / cannot | Block duplicate accounts created via email aliases (+tags, Gmail dots).メールエイリアスによる重複アカウントを防止 | 6 | 2026-06-19 | Active | 26.5.7 | MIT | Official |
| 4 | cap-captcha-keycloakcan / cannot | Cap (trycap.dev) captcha for the registration flow.登録フローにCap CAPTCHAを追加 | 4 | 2026-10-08 | Active | 26.8.0 |
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | keycloak-atomic-auth-flowscan / cannot | Admin REST endpoint to atomically import authentication flows as code.認証フローをアトミックにインポートする管理API | 5 | 2026-10-01 | Active | 26.8.0 | Apache-2.0 | Official |
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | keycloak-extensions-democan / cannot | Demo of many SPI types: action token, authenticators, event listener, token mapper, required action, etc.多数のSPI実装例(actiontoken/authenticator/event-listener/tokenmapper/requiredaction等) | 434 | 2026-10-14 | Active | nightly | Apache-2.0 | Official |
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | keycloak-config-clican / cannot | CLI to manage Keycloak realm configuration as code (YAML/JSON).Keycloakのrealm設定をYAML/JSONでコード管理するCLI | 1,213 | 2026-10-26 | Active | 26.6.2 | Apache-2.0 | Official |
| 2 | terraform-provider-keycloakcan / cannot | Terraform provider for managing Keycloak resources.Keycloakリソースを管理するTerraform provider | 956 | 2026-10-13 | Active | unknown | Apache-2.0 | Official |
| 3 | testcontainers-keycloakcan / cannot | Testcontainers module to run Keycloak in integration tests.Keycloakを統合テストで起動するTestcontainersモジュール | 464 | 2026-10-11 | Active | nightly | Apache-2.0 | Official |
| 4 | keycloakcan / cannot | Ansible collection to install and configure Keycloak / Red Hat build of Keycloak.Keycloakを導入・設定するAnsibleコレクション | 139 |
Kept for reference; not part of the rankings above.
| # | Name | Summary | ★ | Last commit | Activity | KC | License | Src |
|---|---|---|---|---|---|---|---|---|
| 1 | keycloak-2fa-sms-authenticatorcan / cannot | SMS OTP second-factor authenticator via AWS SNS (demo).AWS SNS経由のSMS OTP二要素認証(デモ) | 377 | 2025-05-07 | Inactive | 24.0.0 | MIT | Community |
| 2 | keycloak-extensionscan / cannot | Collection of example extensions.拡張のサンプル集 | 230 | 2022-09-19 | Inactive | unknown | Other (see repo) | Official |
| 3 | keycloak-event-listener-rabbitmqcan / cannot | Publish Keycloak events to RabbitMQ.KeycloakイベントをRabbitMQへ送信 | 170 | 2024-03-20 | Inactive | 21.1.2 | Apache-2.0 | Official |
| 4 | keycloak-passportcan / cannot | Passport.js strategy for multi-realm Keycloak login (Node.js).Node.js(Passport.js)用のKeycloak認証ストラテジー | 104 | 2018-09-07 | Inactive |
See CONTRIBUTING.md — add a YAML file under data/projects/ and open a PR. The README and site are regenerated automatically.
| 5 | keycloak-psso-extensioncan / cannot | macOS Platform Single Sign-On (PSSO) support.macOS Platform SSO対応 | 50 | 2026-10-16 | Active | unknown | GPL-2.0 | Official |
| 6 | keycloak-app-passwordscan / cannot | App-specific passwords.アプリ専用パスワードを発行 | 23 | 2026-09-30 | Active | unknown | GPL-3.0 | Official |
| 7 | keycloak-client-cert-lookup-for-envoycan / cannot | X.509 client certificate lookup for Envoy proxies.Envoy経由のX.509クライアント証明書取得 | 9 | 2026-10-19 | Active | 26.8.1 | Apache-2.0 | Official |
| 8 | keycloak-personal-access-tokenscan / cannot | Scoped personal access tokens usable as Basic Auth passwords.Basic認証で使えるスコープ付き個人アクセストークン | 4 | 2026-05-20 | Active | unknown | GPL-3.0 | Official |
| 9 | keycloak-token-authcan / cannot | Authenticator that logs in with an ID or access token.IDトークン/アクセストークンでログイン | 1 | 2026-06-29 | Active | 26.6.1 | MIT | Official |
| Active |
| unknown |
| AGPL-3.0 |
| Official |
| 5 | keycloak-push-mfa-extensioncan / cannot | Push-notification MFA.プッシュ通知によるMFA | 12 | 2026-10-19 | Active | 26.8.1 | Apache-2.0 | Official |
| Active |
| 26.7.2 |
| Apache-2.0 |
| Official |
| unknown |
| Apache-2.0 |
| Official |
| 5 | keycloak-orcidcan / cannot | ORCID social identity provider.ORCID用Identity Provider | 17 | 2026-07-01 | Active | 26.5.0 | Other (see repo) | Official |
| 6 | Extended-SAML-IDPcan / cannot | SAML identity provider supporting direct (synchronous) SAML responses.同期SAMLレスポンス対応のSAML Identity Provider | 16 | 2026-10-13 | Active | 26.6.4 | Apache-2.0 | Official |
| 7 | keycloak-tiktokcan / cannot | TikTok social login provider.TikTok用Identity Provider | 6 | 2026-07-24 | Active | unknown | Apache-2.0 | Official |
| 8 | keycloak-minecraft-idpcan / cannot | Microsoft / Xbox identity provider that resolves Minecraft profiles.Minecraftプロフィールを解決するMicrosoft/Xbox IdP | 3 | 2026-10-26 | Active | unknown | Other (see repo) | Official |
| Apache-2.0 |
| Official |
| 2026-10-16 |
| Active |
| unknown |
| Apache-2.0 |
| Official |
| 5 | kcwardencan / cannot | Security audit tool for Keycloak configuration.Keycloak設定のセキュリティ監査ツール | 135 | 2026-10-26 | Active | unknown | Apache-2.0 | Official |
| 6 | edp-keycloak-operatorcan / cannot | Kubernetes operator that manages Keycloak realms, clients and users as CRs.Keycloakのrealm/client等をCRで管理するKubernetes Operator | 95 | 2026-10-25 | Active | unknown | Apache-2.0 | Official |
| 7 | provider-keycloakcan / cannot | Crossplane provider to configure Keycloak declaratively.Keycloakを宣言的に設定するCrossplane provider | 73 | 2026-10-19 | Active | unknown | Apache-2.0 | Official |
| 8 | keycloak-clientcan / cannot | Python client for the Keycloak Admin / OIDC APIs.Keycloak用Pythonクライアント | 58 | 2024-12-29 | Stale | unknown | GPL-3.0 | Official |
| 9 | postgres-keycloak-oauth-validatorcan / cannot | PostgreSQL module that validates Keycloak-issued OAuth2 tokens.Keycloak発行のOAuth2トークンを検証するPostgreSQLモジュール | 30 | 2026-09-15 | Active | unknown | Apache-2.0 | Official |
| 10 | keycloak-quarkus-extensionscan / cannot | Add Quarkus extensions or other dependencies to a Keycloak build.KeycloakビルドにQuarkus拡張や依存を追加 | 21 | 2026-10-22 | Active | 26.7.1 | Apache-2.0 | Official |
| unknown |
| Apache-2.0 |
| Official |
| 5 | keycloak-user-spi-democan / cannot | Minimal in-memory User Storage SPI example.インメモリのUser Storage SPI実装例 | 70 | 2024-01-15 | Inactive | 20.0.0 | MIT | Community |
| 6 | keycloak-openfga-event-publishercan / cannot | Publish Keycloak role/group changes to OpenFGA for fine-grained authorization.ロール/グループ変更をOpenFGAへ連携 | 61 | 2024-07-02 | Inactive | 25.0.1 | Apache-2.0 | Official |
| 7 | keycloak-json-remote-claimcan / cannot | Protocol mapper that adds claims fetched from a remote JSON endpoint.外部JSON APIから取得した値をクレームに追加 | 56 | 2020-01-08 | Inactive | 8.0.1 | Apache-2.0 | Official |
| 8 | Keycloak-Federation-ExistingDBcan / cannot | User federation against an existing relational database.既存DBのユーザーをフェデレーション | 53 | 2023-11-21 | Inactive | 21.1.2 | MIT | Community |
| 9 | keycloak-event-listener-mqttcan / cannot | Publish Keycloak events to an MQTT broker.KeycloakイベントをMQTTブローカーへ送信 | 45 | 2024-05-22 | Inactive | unknown | Apache-2.0 | Official |
| 10 | keycloak-wsfedcan / cannot | WS-Federation protocol support.WS-Federationプロトコル対応 | 38 | 2020-11-02 | Inactive | unknown | AGPL-3.0 | Official |
| 11 | verify-keycloak-integrationcan / cannot | IBM Security Verify authenticators (push / MFA).IBM Security Verify連携の認証器(MFA) | 31 | 2020-06-10 | Inactive | unknown | Apache-2.0 | Official |
| 12 | keycloak-regex-mappercan / cannot | Broker mapper that maps multi-valued claims/attributes by regex.正規表現で多値クレーム/属性をマッピング | 21 | 2021-08-23 | Inactive | 15.0.2 | Apache-2.0 | Official |
| 13 | keycloak-github-ssh-key-attribute-mappercan / cannot | Mapper that fetches a user's SSH keys from GitHub into an attribute.GitHubのSSH公開鍵をユーザー属性に取り込む | 20 | 2024-02-12 | Inactive | 22.0.0 | Apache-2.0 | Official |
| 14 | keycloak-impersonation-policy-enforcercan / cannot | Authenticator enforcing an impersonation policy.なりすまし(impersonation)ポリシーを強制 | 13 | 2022-12-23 | Inactive | 18.0.2 | Apache-2.0 | Official |