Software Alternatives, Accelerators & Startups

Keycloak VS Thycotic Secret Server

Compare Keycloak VS Thycotic Secret Server and see what are their differences

Keycloak logo Keycloak

Open Source Identity and Access Management for modern Applications and Services.

Thycotic Secret Server logo Thycotic Secret Server

Privileged Account Management from Thycotic. Enterprise password management software that IT Admins and IT Security Pros love.
  • Keycloak Landing page
    Landing page //
    2022-03-20
  • Thycotic Secret Server Landing page
    Landing page //
    2023-06-13

Keycloak features and specs

  • Open-Source
    Keycloak is an open-source identity and access management solution, which means it is free to use and has a community-driven support system. This can lead to lower costs and more flexibility compared to proprietary solutions.
  • Feature-Rich
    Keycloak offers a comprehensive set of features including single sign-on (SSO), multi-factor authentication (MFA), user federation, identity brokering, and social login. This makes it suitable for a wide range of use cases.
  • Customizability
    With Keycloak, you can customize the authentication and authorization processes through its extensible architecture, allowing for the addition of custom features and integrations.
  • Integration Capability
    Keycloak supports integration with various protocols such as OAuth 2.0, OpenID Connect, and SAML, making it versatile for integrating with different platforms and services.
  • Active Community
    Keycloak has an active and growing community of developers and users who contribute to its improvement and provide support, resources, and shared knowledge.

Possible disadvantages of Keycloak

  • Complexity
    Keycloak can be complex to set up and configure, especially for users who are not familiar with identity and access management concepts. This may require additional time and expertise.
  • Resource-Intensive
    Running Keycloak can be resource-intensive, requiring more CPU and memory compared to simpler authentication solutions. This may necessitate higher infrastructure costs.
  • Learning Curve
    The learning curve for Keycloak can be steep for new users due to its wide range of features and configuration options. Ample time might be required to fully understand and utilize its capabilities.
  • Documentation Quality
    While Keycloak has extensive documentation, some users find it to be insufficiently detailed or difficult to navigate, which can impede the setup and troubleshooting process.
  • Maintenance
    Operating a Keycloak instance involves ongoing maintenance tasks such as updates, security patches, and backups, which can be time-consuming and require dedicated resources.

Thycotic Secret Server features and specs

  • Comprehensive Security
    Thycotic Secret Server offers robust security features including end-to-end encryption, role-based access controls, and multi-factor authentication, ensuring that sensitive information is well protected.
  • User-Friendly Interface
    The platform features an intuitive and easy-to-navigate user interface, reducing the learning curve for new users and simplifying the management of secrets.
  • Scalability
    Secret Server is designed to scale with your organization, whether you are a small business or a large enterprise, it can handle a growing number of secrets and users efficiently.
  • Integration Capabilities
    The solution integrates seamlessly with various IT and security tools such as SIEM, IAM, and ITSM systems, enhancing overall workflow and security posture.
  • Compliance and Auditing
    Secret Server provides comprehensive logging and reporting features that help organizations meet compliance requirements such as GDPR, HIPAA, and SOX.

Possible disadvantages of Thycotic Secret Server

  • Cost
    The pricing for Thycotic Secret Server can be higher compared to other password management solutions, which may be a concern for smaller organizations with limited budgets.
  • Complexity in Advanced Features
    While the basic features are user-friendly, some advanced functionalities may require specialized knowledge to configure and manage effectively.
  • Performance Issues
    In some cases, users have reported performance issues, particularly when handling large volumes of secrets or during peak usage times.
  • Limited Offline Access
    The solution has limited functionality when offline, which can be a disadvantage for users who need constant access to their secrets in environments with unreliable internet connectivity.
  • Customization Limitations
    While the product offers various features, some users may find the customization options lacking in meeting highly specific organizational needs and workflows.

Keycloak videos

What is Keycloak and what are the main features | DevNation Live

More videos:

  • Review - Keycloak Overview
  • Review - Easily Secure Your Front and Back End app with Keycloak

Thycotic Secret Server videos

No Thycotic Secret Server videos yet. You could help us improve this page by suggesting one.

Add video

Category Popularity

0-100% (relative to Keycloak and Thycotic Secret Server)
Identity And Access Management
Password Management
0 0%
100% 100
Identity Provider
100 100%
0% 0
Security & Privacy
37 37%
63% 63

User comments

Share your experience with using Keycloak and Thycotic Secret Server. For example, how are they different and which one is better?
Log in or Post with

Reviews

These are some of the external sources and on-site user reviews we've used to compare Keycloak and Thycotic Secret Server

Keycloak Reviews

12 User Authentication Platforms [Auth0, Firebase Alternatives]
You can integrate Keycloak with your applications to have a single-sign-in and single-sign-out experience. Moreover, one can activate social logins without any modification in code. Additionally, it allows user authentication via existing OpenID Connect or SAML 2.0
Source: geekflare.com
10+ Open-source Single-Sign On (SSO) Solutions
Keycloak is a free, open-source identity and access management system with highly configurable Single-Sign-On (SSO) support.
Source: medevel.com
10 Best Auth0 Alternatives and Similar Platforms
Keycloak may be quite beneficial because it provides a built-in method for syncing with databases, such as LDAP or Active Directory, when your users already are registered on. If you use Social Login for social platforms such as Facebook, Keycloak might be a great tool for your organization.
Top 5 Open Source Single Sign-On Software In the Year 2021
KeyCloak is another free software that is based on OpenID Connect, OAuth2.0, and SAML2.0. It provides SSO capabilities across web applications and web services. Above all, this open source software provides integrations with LDAP and Active Directory. There is a logical user interface where users can manage roles, permissions, and sessions. Moreover, this free solution...
IAM: A comparison of open-source tools
/ Digitalberry news / IAM: A comparison of open-source toolsIAM: A comparison of open-source toolsWhy use an Identity Provider (IdP)?Comparative study of Identity Providers (IdP)1. Our team’s first choice: Keycloak2. In second place of our comparative study: Gluu3. Special mention: FusionAuthDiscover our expertiseContact our experts

Thycotic Secret Server Reviews

We have no reviews of Thycotic Secret Server yet.
Be the first one to post

Social recommendations and mentions

Based on our record, Thycotic Secret Server should be more popular than Keycloak. It has been mentiond 10 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.

Keycloak mentions (4)

  • Beyond the login page
    Most of the time nowadays, I prefer offloading this to an identity provider, using OpenID Connect or soon Federated Credential Management (FedCM), even if that means shipping an identity provider as part of the deliverables (I generally go with Keycloak, with keycloak-config-cli to provision its configuration). I'm obviously biased though as I work in IT services, developping software mainly for... - Source: dev.to / over 1 year ago
  • Okta Says Hackers Stole Data for All Customer Support Users
    Yet another breach of Okta... Why are companies not running something like keycloak [1] themselves? Are administrative/maintenance costs too high or is it plausible deniability? [1] https://keycloak.org. - Source: Hacker News / over 1 year ago
  • I built a ready-to-use auth server with TypeScript and Express.js
    I'd stick with a solution like https://keycloak.org in that instance. Source: about 2 years ago
  • Authelia is an open-source authentication/authorization server with 2FA/SSO
    A few more projects in this space: - Keycloak (you won't get fired for picking this)[0] - CloudFoundry's UAA[1] - Gluu [2] - Keratin [3] - OpenUnison [4] - Dex[5] - Netlify's GoTrue[6] All of these solutions are a bit different but here are some of the axes: - Whether or not they function as an OAuth provider - Whether they're centered around application-user-login (email + password) or application auth (OAuth) or... - Source: Hacker News / about 4 years ago

Thycotic Secret Server mentions (10)

  • Looking for PAM solution
    Maybe take a look at https://delinea.com/products/secret-server. Source: almost 2 years ago
  • How do you guys manage rotating passwords for service accounts?
    SecretServer can find all dependencies for a given service account (services, scheduled tasks, IIS pools, config files, etc.) and update everything for you on an interval. Source: about 2 years ago
  • Automated password changing service?
    Thycotic/Delinea has a really cool solution that can go beyond the typical AD password rotation but its $$$ and I'm not sure if you will see the value in paying extra just to change that password on some random device or web service. https://thycotic.com/products/secret-server/. Source: over 2 years ago
  • What are secure methods of storing log in credentials when programs and scripts need to access other computers or databases?
    We use an enterpise product https://thycotic.com/products/secret-server/ This automates the process of creating/implementing 1) unique passwords for EVERY account 2) strong password policies 3) password rotation. Source: almost 3 years ago
  • Choosing the Right PAM Solution
    Thycotic Secret Server — This full-featured PAM tool is available both on premises and in the cloud. It can automatically discover and help you manage your privileged accounts to protect against malicious activity enterprise-wide. It includes application access control, single sign-on, password management, least privilege and credential management. Source: over 3 years ago
View more

What are some alternatives?

When comparing Keycloak and Thycotic Secret Server, you can also consider the following products

Auth0 - Auth0 is a program for people to get authentication and authorization services for their own business use.

1Password - 1Password can create strong, unique passwords for you, remember them, and restore them, all directly in your web browser.

Okta - Enterprise-grade identity management for all your apps, users & devices

Dashlane - Dashlane is a secure way to bypass tedious logins, forms, and purchases online. Save all of your information and save time in your online transactions.

OneLogin - On-demand SSO, directory integration, user provisioning and more

RoboForm - Never have to remember or type your passwords again with RoboForm the world's top password manager. Download Free today for all of your computers and devices!