Keycloak is an open-source identity and access management tool built to centralize authentication and authorization. Its user management features go far beyond simple account creation. You can manage users, groups, roles, credentials, and sessions, all from one interface or via its REST API.
User Creation and Import
Adding users in Keycloak can be done manually in the admin console or programmatically through its APIs. Bulk import options allow integration with LDAP, Active Directory, or other identity providers. Custom attributes can be stored with each account, giving you flexibility for application-specific needs.
Roles and Groups
Keycloak uses roles to control permissions. Assign roles directly to users or link them to groups for scalable role management. Groups make it easy to apply changes across hundreds or thousands of accounts. Realm-level and client-level roles keep authorization clear and organized.
Credentials and Authentication
Keycloak user management handles passwords, OTP devices, and identity provider links. Admins can reset passwords, configure MFA, or force credential updates at login. Federated identity means your users can log in through external providers without creating new accounts.