Find your plan and launch managed Keycloak in just minutes.

Whether you’re a start-up or in the top 100 Fortune’s company, Cloud-IAM covers your support and hosting needs.
Loading...

Join over 5,000 users who trust Cloud-IAM

Compare details about our all plans

Freemium
Starter
Essential
Premium
Max

SLA & On-call

Guaranteed SLA
99%
99.9%
99.95%
99.98%
On-call team
24/7
24/7

Incident

Incident communication channel
Global discord
Global discord
Ticket & email
Ticket & email
Ticket & email
Notification mode
Passive
Passive
Proactive
Proactive
Proactive
Incident Response Time
Best effort
12h
1h
30mn
Dedicated status page
Resolution Time Objective (RTO)
Best effort
6h
2h
1h
Recovery Point Objective (RPO)
24h
24h
24h (customizable)
15mn

Support

Community & documentation
Access ticket center and e-mail
Support response time (french working day)
2 days
1 day
1 day

System operational maintenance

Planning for updates
Automatic
Automatic
Customizable
Customizable
Architectural maintenance
Automatic
Automatic
Customizable
Customizable
Upgrade on demand feature

Backup

Backup (snapshots & cold Backups)
24h
24h
24h (customizable)
15min
Snapshots retention
7 days
7 days
7 days (customizable)
7 days (customizable)
Cold backups retention
1 month
1 month
1 month
1 month

Integration - Configuration support

Configuration integration support
Keycloak consulting expertise
1 day/month
1 day/month
Communication channel
Ticket / email
Ticket / email / video call
Ticket / email / video call
Configuration response time (french working day)
5 days
3 days
3 days

Users & realms

Users
100
Customizable
Customizable
Customizable
Customizable
Realms
1
100
100
100
100

Cloud providers

Scaleway (Europe)
Amazon Web Services (Worldwide)
Google Cloud (Worldwide)
Outscale (France)
Microsoft Azure (Worldwide)

Architecture

Architecture type
Mutualized
Single region
Single region
Single region
Multi region
Infrastructure
Mutualized
Dedicated
Dedicated
Dedicated
Dedicated
Bare-Metal & High Available

Keycloak extension (SPI)

Theme customization by Cloud-IAM
Custom extensions (.jar)
Keycloak Marketplace by Cloud-IAM
Keycloak Marketplace exclusive discount
-25%
-50%
-75%

Configuration features

Allow lists
Custom domains
Environment variables
Third parties (trusted certificates, password deny list,...)
Terraform IaC / Pulumi IaC

Monitoring features

Insights (metrics: users, conexions, realms)
Infrastructure logs (Keycloak logs)
Infrastructure logs (load balancer logs)
Keycloak events
Audits Logs (info, update, backup, redeployment)

Reversability

Keycloak export (configuration, users, data, password)
Number of exports
1 per day
Unlimited
Unlimited
Unlimited
Availability of export feature
24/7
24/7
24/7
24/7

Usage limitation

Without rate limiting
Active user
Unlimited
Unlimited
Unlimited
Unlimited
Unlimited
Connected client (applications)
Unlimited
Unlimited
Unlimited
Unlimited
Unlimited
SSO
Unlimited
Unlimited
Unlimited
Unlimited
Connected internal or exertal user/identity federation
Unlimited
Unlimited
Unlimited
Unlimited
Unlimited
Cloud-IAM REST API
Unlimited
Unlimited
Unlimited
Unlimited
Keycloak REST API
Unlimited
Unlimited
Unlimited
Unlimited
Unlimited

API

Access Keycloak REST API
Usage Keycloak REST API
Unlimited
Unlimited
Unlimited
Unlimited
Unlimited
Access Cloud-IAM REST API
Usage Cloud-IAM REST API
Unlimited
Unlimited
Unlimited
Unlimited

Keycloak features

Keycloak events
MFA
SSO
Password policy
LDAP / AD / Kerberos / other external database
Identity Provider Brokering
Social providers
Native supported protocols
OIDC, OAuth 2.0, SAML
OIDC, OAuth 2.0, SAML
OIDC, OAuth 2.0, SAML
OIDC, OAuth 2.0, SAML
OIDC, OAuth 2.0, SAML
Authorization pattern
ABAC, RBAC, PBAC, GBAC
ABAC, RBAC, PBAC, GBAC
ABAC, RBAC, PBAC, GBAC
ABAC, RBAC, PBAC, GBAC
ABAC, RBAC, PBAC, GBAC
User management (groups, attributs, etc..)

Keycloak Authentication methods

Login password
Reset password
Passkeys
SMS/email OTP
With SPI extension
With SPI extension
With SPI extension
Magic link
With SPI extension
With SPI extension
With SPI extension
Passwordless with WebAuthn
Social Login
Identity Provider
MFA

Frequently Asked Questions

Can’t find your answer?

Need any help?

How does Cloud-IAM’s pricing work?

Simple, Transparent Pricing That Grows With You Cloud-IAM uses a straightforward pricing model based on three key factors: User Count – Pricing scales with the total number of unique users connected to your Keycloak instance. Support Level – Select the support tier that matches your business needs, from standard to premium. Cloud Provider – Costs may vary depending on your chosen cloud platform (Scaleway, Outscale, AWS, Google Cloud and Azure). Our pricing is flexible and usage-based, with no hidden fees. Use our calculator to estimate your costs in minutes.

How can I estimate my number of users?

At Cloud-IAM, we believe in transparent pricing and long-term predictability—so you always know what to expect as your organization grows. To estimate your user count, simply total all unique user accounts connected to your Keycloak instance. This includes any user authenticated through identity providers like social login, SSO, Azure AD, or LDAP—if they access your apps via Keycloak, they count. Note: Our pricing is based on total user accounts, not Monthly Active Users (MAU). Not sure how to calculate your total? Contact our support team—we’ll help you analyze your setup and give you an accurate estimate. A correct user count ensures transparent, predictable pricing that grows with you.

Are there any limitations on the number of clients?

No, Cloud-IAM does not enforce a hard limit on the number of users you can manage. Each plan includes a soft quota based on your projected usage. These limits are flexible and can be increased at any time as your needs evolve. If you anticipate going beyond your current quota, just contact our support team — we’ll help you scale smoothly, with no service interruption.

What happens if we hit our user limit? Is it hard stop?

Cloud-IAM will never block access or disrupt your Keycloak service if you exceed your current user quota. Instead, your account manager will contact you to determine whether the overage is temporary or reflects ongoing growth. Because our quotas are soft limits, we prioritize service continuity. Your instance will remain fully operational while we evaluate and, if needed, adjust your plan. We recommend monitoring your user count regularly and reaching out proactively if you anticipate scaling.

Can I start with a small plan/support and upgrade in the future?

As your needs evolve, you can upgrade your plan or enhance your support level at any time. This flexibility allows you to align costs with your project’s stage while ensuring a seamless transition to production. Not sure where to start? Our team is here to help you choose the right plan for your current needs and future goals.

How many time will it take to have access to my Managed Keycloak?

Each Keycloak deployment is fully dedicated and provisioned in the cloud region of your choice. The setup process typically takes around 20 minutes. Once deployed, you'll receive immediate access to your Managed Keycloak environment, ready for configuration and integration with your applications.

Focus on your business, we handle the Keycloak

Managed Keycloak solution by Cloud-IAM

Since 2019, Cloud-IAM has been simplifying Keycloak management for 20M+ users. Ready to simplify yours?

Cloud-IAM logo without name