← All guides
Keycloak
Open-source identity and access management — single sign-on (SSO), OAuth2/OIDC, and user federation for your other self-hosted apps.
This guide is synthesized from Keycloak's own official documentation, linked above — always cross-check exact package/version names there before running these commands on a production server, since distro and project versions move over time.
1Run the official quickstart container
docker run -d -p 8080:8080 -e KC_BOOTSTRAP_ADMIN_USERNAME=admin -e KC_BOOTSTRAP_ADMIN_PASSWORD=changeme --name keycloak quay.io/keycloak/keycloak:latest start-devstart-dev is for evaluation only (in-memory, no HTTPS enforcement) — the official docs' production guide covers a real database and proper TLS setup before exposing this beyond your own network.
2Open the admin console
http://your-server-ip:8080 — log in with the admin username/password set above, then change it.