Keycloak is an open source software product that enables single sign-on with identity and access management for modern applications and services.

---

The IT building guidelines for digital identities stipulate that digital identities, regardless of whether they concern employees or citizens, are always stored in the company's own data center and managed with Keycloak.

Connecting to BayernID as login mechanism was implemented via the Keycloak brokering mechanism BayernID - Plugin. Keycloak is also the technical basis for Elster Nezo, a plugin for connecting the Elster company account. (Note: Plugin only required for Keycloak version < 20.0)

The HTTP Header Plugin checks specific HTTP-headers for access control.
The Role Plugin manages access to clients based on user roles.
The Username-from-login-hint Plugin extracts the username from a request parameter for a seamless login.
The Custom OTP Plugin adds functionality in the area of two-factor authentication with one-time passwords (TOTP), enhancing security during the login process.

More Keycloak plugins can be found in our GitHub repositories.