Skip to content

Identity provider migration to Keycloak

Move users and applications to Keycloak from Auth0, Okta, Azure AD B2C or a self-built login.

Which of these sounds like your company?

  • Azure AD B2C is ending

    No longer sold to new customers; supported until at least May 2030.

  • Licence costs per user

    Costs rise with every new user.

  • Identities outside your control

    Your user data lives in a vendor's cloud.

  • Fear of password resets

    Users shouldn't have to start over.

  • Many connected applications

    Every app must keep working during the move.

  • A self-built login

    Your own login system is hard to maintain and secure.

Don't see your challenge? Let's discuss your use case.

Book a call →

How we work on your use case

Pick the challenge that matters most. We take it from there.

  1. 01

    Map your setup

    users, apps, login flows and rules

  2. 02

    Prove it

    with a test group and one application

  3. 03

    Migrate in phases

    app by app, old provider as fallback

  4. 04

    Switch off

    the old provider once everything runs

Technical details
  • Inventory of users, applications, login flows and custom rules
  • attributes, roles and groups mapped to realms, clients and roles
  • password hashes imported where export is possible and the algorithm is supported, otherwise migration at next login
  • each OIDC or SAML application reconfigured and tested
  • MFA, branded login pages and social logins rebuilt
  • phased cut-over with fallback

Flexible to fit you

  • All at once, or in phases

  • Password hashes imported, or users moved at next login

  • EU cloud, your cloud or on-premises

  • Your branding on every login page

  • We run Keycloak afterwards, or hand it over to you

Measured on the KPIs you set

You choose what success means. We measure it from day one.

For example
  • Users migrated

  • Login success rate

  • Support tickets after the switch

  • Applications switched

FAQ

Not necessarily. We import password hashes where possible, or move users at their next login.

It's no longer sold to new customers since 1 May 2025. Microsoft supports existing customers until at least May 2030.

Auth0, Okta, Azure AD B2C and self-built login systems, among others.

It depends on the complexity and scope of your project. We discuss it in the first call.

Let's plan your move to Keycloak

Book a call →