Midships Keycloak Accelerator for Red Hat Build of Keycloak

Keycloak is the engine. Production is everything around it.

Keycloak gives you open standards, federation and a flexible flow engine out of the box. Running it for a regulated enterprise needs far more: high availability across sites, upgrades without downtime, configuration as code, a hardened baseline and journeys that work beyond the browser. The Midships Accelerator puts that in place on day one, as source code you own.

Keycloak out of the box
A strong product, and a long list of platform, security and journey work your team must design, build and keep current
Midships Keycloak
The same product with that work already done, refined across years of zero downtime delivery at tier one banks
1. What it takes

From a working Keycloak to a production platform

Start with what Keycloak gives you, add what a regulated enterprise needs, then see who does the work.

What Keycloak gives you

Your engineering teamDesigns, builds and maintains each item Midships AcceleratorSource code, in place on day one What a regulated enterprise needson top of Keycloak Keycloak out of the box Every environment

2. One upgrade, step by step

Taking a Keycloak release to production

Upgrades are where the difference shows. A new Red Hat Build of Keycloak release arrives with a security fix, and it has to reach production without customers noticing.

New Red Hat Build of Keycloak release with a security fix

    Illustrative scenario. Version numbers and identifiers are examples.

    3. Side by side

    Out of the box versus the Midships Accelerator

    Keycloak earns its place on open standards and economics. These are the gaps it leaves for a regulated environment, and how each is closed.

    Keycloak out of the box
    With the Midships Accelerator
    High availability
    A documented multi site blueprint your team builds and tests
    HA clustering and multi site DR with rehearsed failover and rollback
    Topology
    Single cluster deployment via the operator
    Multi cluster, multi region and multi cloud
    Upgrades
    Rolling updates for patch releases; larger upgrades need planning
    Blue green and canary upgrades, zero downtime by design
    Scale
    Sizing and scaling designed by your team
    Elastic autoscaling on EKS, AKS, GKE and OpenShift
    Configuration
    Realm export and import, and the Admin API
    Git friendly realm, client and flow configuration, everything as code
    Promotion
    Pipelines built by your team
    Audit ready promotion pipelines, DevSecOps native
    Secrets
    Vault support for a limited set of fields
    HashiCorp Vault and Kubernetes secrets out of the box
    Security baseline
    The controls exist; choosing and applying a baseline is yours
    A hardened baseline built in, applied to every build
    Headless journeys
    Authentication flows built around the browser
    Extended Authentication Flow API: any flow as a callable endpoint for mobile and embedded apps, proprietary to the Accelerator
    Modern authentication
    WebAuthn and passkeys supported; the rest is custom work
    Passwordless, passkeys, silent device authentication, transaction signing and risk based step up, through the Authenticator Library
    Identity journeys
    A flow engine to build journeys with
    Pre packaged identity journeys
    Operations
    Run by your team
    Run by your team with full source code, or by Guardian with 24x7 SRE led operations and quarterly DR drills with auditor evidence packs

    Keycloak already does the hard part of identity. We do the hard part of running it.

    4. Why Keycloak

    Open source economics, enterprise standards

    Standards first

    OIDC, OAuth2, SAML, LDAP and AD federation, and WebAuthn, with no proprietary extensions required.

    Predictable cost

    An open source core with CPU based licensing on Red Hat Build of Keycloak, and no per identity or per session pricing.

    No lock in

    Fully extensible. The Accelerator ships as full source code, so your team owns the platform.

    Composable

    Works alongside external policy, fraud and analytics systems, and alongside commercial IAM platforms.

    Enterprise support

    Red Hat Build of Keycloak adds support, CVE remediation and a published lifecycle. We recommend it for regulated enterprises.

    NHI and agentic AI ready

    Keycloak 26.6 added experimental support for acting as an authorisation server for MCP. The Accelerator takes agent and service identities to production: agent clients defined as code and promoted through the same audited pipelines, and ready to integrate with a Persona Registry for agent authority and accountability.

    5. Working with us

    A platform you own from the first sprint

    The Accelerator gives you a development ready environment that mirrors production within a couple of sprints, instead of rebuilding what every regulated Keycloak programme ends up needing.

    You license it, receive the complete source code and can modify it for internal use. Midships or a qualified partner deploys it with full knowledge transfer. From there you run it yourself, or keep the people who built it as your operator.

    Calculate your savings   Talk to Midships
    Accelerator licenceFull source code, yours to modify for internal use.
    DeploymentBy Midships or a qualified partner, with full knowledge transfer.
    Guardian, optional24×7×365 managed operations starting from USD 240,000 annually (indicative, excluding taxes), alongside or instead of your own team.