# Keymate for Keycloak — Docs & Resources
> Keymate extends **Keycloak** with fine-grained authorization (OpenFGA/ReBAC+ABAC), multi-tenant IAM, zero-integration enforcement via gateways/mesh, and deep observability & audit — without rewriting your applications.

We provide this manifest so LLMs know which Keycloak-related pages to prioritize.

## For Keycloak Users (Start Here)
- [What is Keymate?](https://keymate.io): Positioning for Keycloak teams
- [Keycloak Extensions](https://keymate.io/extensions): SPIs, mappers, enrichers, authenticators
- [Fine-grained Authorization](https://keymate.io/features/advanced-authorization/fine-grained-authorization): OpenFGA/ReBAC + ABAC
- [Admin Console](https://keymate.io/keymate-admin-console): Secure, policy-aware UI
- [Gateway Enforcement](https://keymate.io/ecosystem/integrations/api-gateway-service-mesh): Zero-integration plugins
- [Audit & Observability](https://keymate.io/features/compliance/observability-opentelemetry): Traces, logs, metrics

## Core
- [Homepage](https://keymate.io): Overview & value proposition
- [Features](https://keymate.io/features): Capability families
- [Deployment](https://keymate.io/deployment): On-prem, SaaS, VPC, Kubernetes
- [Ecosystem](https://keymate.io/ecosystem): Integrations & standards
- [Support](https://keymate.io/support): Advisory & services
- [Contact](https://keymate.io/contact): Pricing, SLAs, partnerships
- [Blog](https://keymate.io/blog): News & updates

## Deployment
- [Kubernetes-native](https://keymate.io/deployment/kubernetes-native): Helm/GitOps deployment
- [Air-gapped / On-prem](https://keymate.io/deployment/airgapped-onprem): Offline deployments
- [Private Cloud / VPC](https://keymate.io/deployment/private-cloud-vpc): Network isolation
- [Managed SaaS](https://keymate.io/deployment/managed-saas): Managed option
- [Multi-stage Environments](https://keymate.io/deployment/multi-stage-environments): Dev/Test/Prod separation
- [Parallel IAM Migration](https://keymate.io/deployment/parallel-iam-migration): Parallel run
- Platform: [Kubernetes Ready](https://keymate.io/deployment/platform/kubernetes-ready), [Container Runtime](https://keymate.io/deployment/platform/container-runtime), [AWS/Azure](https://keymate.io/deployment/platform/aws-azure), [Quarkus Native](https://keymate.io/deployment/platform/quarkus-native)

## Ecosystem — Identity
- [OpenID & OAuth2](https://keymate.io/ecosystem/identity/openid-oauth2): Protocol flows
- [SAML2 Federation](https://keymate.io/ecosystem/identity/saml2-federation): Enterprise federation
- [SCIM2 Provisioning](https://keymate.io/ecosystem/identity/scim2-provisioning): Directory sync
- [Multi-identifier Login](https://keymate.io/ecosystem/identity/multi-identifier-login): Alternate identifiers
- [MFA & Step-up](https://keymate.io/ecosystem/identity/mfa-step-up-authentication): Risk-based elevation
- [OIDC4VC / VCs](https://keymate.io/ecosystem/identity/oidc4vc-verifiable-credentials): Verifiable credentials

## Ecosystem — Integrations
- [API Gateway & Service Mesh](https://keymate.io/ecosystem/integrations/api-gateway-service-mesh): Gateway-enforced auth
- [Kafka](https://keymate.io/ecosystem/integrations/kafka): Event backbone
- [Event Streaming & Observability](https://keymate.io/ecosystem/integrations/event-streaming-observability): Tracing streams
- [Event Catalog](https://keymate.io/ecosystem/integrations/event-catalog): Schema visibility
- [Directory / LDAP Sync](https://keymate.io/ecosystem/integrations/directory-ldap-sync): Federation & sync
- [OpenFGA / FGAC](https://keymate.io/ecosystem/integrations/openfga-fgac): ReBAC store
- [OpenMetadata](https://keymate.io/ecosystem/integrations/openmetadata): Metadata-aware DSAC
- [Decentralized Identity](https://keymate.io/ecosystem/integrations/decentralized-identity): DID/VC ecosystem
- [HRMS / e-Gov Connectors](https://keymate.io/ecosystem/integrations/hrms-egov-connectors): Attribute enrichment

## Advanced Authorization
- [Fine-grained Authorization](https://keymate.io/features/advanced-authorization/fine-grained-authorization): ReBAC + ABAC
- [RBAC](https://keymate.io/features/advanced-authorization/role-based-access-control): Role model
- [ABAC](https://keymate.io/features/advanced-authorization/attribute-based-access-control): Attribute policies
- [RADAC](https://keymate.io/features/advanced-authorization/risk-adaptive-access-control): Risk/context
- [Contextual Access](https://keymate.io/features/advanced-authorization/contextual-access-control): Situational
- [DSAC](https://keymate.io/features/advanced-authorization/data-security-attribute-control): Data sensitivity
- [Metadata-aware Hook](https://keymate.io/features/advanced-authorization/metadata-aware-authorization-hook): Catalog labels
- [Advanced Policy Editor](https://keymate.io/features/advanced-authorization/advanced-policy-expression-editor): Visual + text
- [Inline Policy Authoring](https://keymate.io/features/advanced-authorization/inline-policy-authoring): Inline hooks
- [Dual-mode Definition](https://keymate.io/features/advanced-authorization/dual-mode-policy-definition): Two editors
- [JavaScript Policies](https://keymate.io/features/advanced-authorization/javascript-access-policies): Extensibility
- [JIT Role Elevation](https://keymate.io/features/advanced-authorization/just-in-time-role-elevation): Temporary access
- [Policy Scoping](https://keymate.io/features/advanced-authorization/attribute-based-policy-scoping): Tenant/env scope
- [Visual Simulation](https://keymate.io/features/advanced-authorization/visual-policy-simulation): What-if tests
- [Why Denied?](https://keymate.io/features/advanced-authorization/why-denied-analysis-tools): Explainability
- [Admin Console & Secure Frontend](https://keymate.io/features/advanced-authorization/admin-console-and-secure-frontend-architecture): SSR/CSR

## Compliance & Observability
- [Audit Logging](https://keymate.io/features/compliance/audit-logging): Immutable records
- [Access Decision Streaming](https://keymate.io/features/compliance/access-decision-streaming): Real-time signals
- [Audit Subscription Events](https://keymate.io/features/compliance/audit-subscription-events): Event hooks
- [Central Audit Server](https://keymate.io/features/compliance/central-audit-server): Centralization
- [Keycloak Extended Logging](https://keymate.io/features/compliance/keycloak-extended-logging): Enriched logs
- [Event Tracing (OpenTelemetry)](https://keymate.io/features/compliance/event-tracing-opentelemetry): Spans
- [Observability (OpenTelemetry)](https://keymate.io/features/compliance/observability-opentelemetry): End-to-end view
- [Privacy & Regulatory](https://keymate.io/features/compliance/privacy-and-regulatory-compliance): Practices
- [Transformation Error Logging](https://keymate.io/features/compliance/transformation-error-logging): Fail-fast

## Organization & Resource Modeling
- [Multi-tenant IAM](https://keymate.io/features/organization-management/multi-tenant-iam): Tenant isolation
- [Delegated Administration](https://keymate.io/features/organization-management/delegated-administration): Delegation
- [Organization Lifecycle](https://keymate.io/features/organization-management/organization-lifecycle-management): Onboarding/offboarding
- [Org-aware Token](https://keymate.io/features/organization-management/org-aware-token): Tenant attributes
- [Metadata-driven Modeling](https://keymate.io/features/resource-modeling/metadata-driven): Data-first
- [Bulk Import](https://keymate.io/features/resource-modeling/bulk-import): Scale-in
- [Swagger Import](https://keymate.io/features/resource-modeling/swagger-import): API-first
- [Policy Templates](https://keymate.io/features/resource-modeling/policy-templates): Reusable

## Legal & Company
- [Privacy Policy](https://keymate.io/privacy-policy): Data protection
- [Cookie Policy](https://keymate.io/cookie-policy): Cookies
- [Terms of Service](https://keymate.io/terms-of-service): Legal terms
- [Information Security Policy](https://keymate.io/information-security-policy): ISMS overview
- [Press Kit](https://keymate.io/press-kit): Brand assets
- [Join the Team](https://keymate.io/jointheteam): Careers

## Optional
- [Blog Archive](https://keymate.io/blog): Articles & releases

_Last updated: 2025-10-03 · License: CC-BY 4.0_