Open sourceActive

Keycloak Authorization Services

Fine-grained authorization service supporting ABAC, RBAC, UBAC, CBAC, and custom policies via SPI.

Open source page ↗

Field note

What it does

Policy engine with UMA 2.0, resource/scope/permission management, policy enforcers, and RESTful Protection API.

Capabilities

Available capabilities

ABACUser-based access controlUMA 2.0 supportTime-based access controlContext-based access controlRole-based access control

Tags

Tags

Policy EngineUMAAuthorization

Ways to use it

Ways to use it

rest

java / https://www.keycloak.org/docs/latest/authorization_services/index.html#protection-api

sdk

javascript / https://www.keycloak.org/docs/latest/authorization_services/index.html#_policy_enforcer_js

sdk

java / https://www.keycloak.org/docs/latest/authorization_services/index.html#_enforcer_overview

Product features

Product features

Breaking changes

Deprecated features

Migrating to 26.6.3

Migrating to 26.6.4

Migrating to 26.7.0

Migrating to 26.7.1

Migrating to 26.7.2

Migration Changes

Notable changes

Removed features

Upgrading Guide

Upgrading Keycloak