Your B2B SSO Infrastructure. Your Control.
RealmSSO is the open-source control plane for enterprise SSO. Deploy it on your infrastructure, configure SAML, OIDC, and SCIM for your customers, and get full observability — without vendor lock-in.
No vendor lock-in. No per-seat pricing. 100% open source.
Built for B2B SaaS companies that need enterprise SSO
Everything you need for enterprise SSO
A complete control plane for B2B identity that your customers will love and your team can trust.
SAML 2.0
Full SAML 2.0 support with metadata upload, manual configuration, automatic Keycloak IdP creation, and health checks.
OpenID Connect
OIDC discovery-based configuration with automatic client setup, secret encryption, and comprehensive redirect URI management.
SCIM 2.0 Directory Sync
Automated user provisioning and deprovisioning with SCIM 2.0. Supports group sync, attribute mapping, and custom bearer tokens.
Customer Admin Portal
Branded, embeddable portal for your customers to configure their own SSO. Magic-link access, connection testing, and status monitoring.
Observability & Analytics
Real-time and historical metrics on login success/failure, SCIM events, connection health, error rates, and latency per connection.
API & Webhooks
Everything is API-first. RESTful API with API key authentication, webhook delivery with automatic retry, and full event-driven architecture.
How it works
Deploy once. Manage all your customers' SSO from one place.
Deploy
Deploy RealmSSO on your Kubernetes cluster with a single Helm command. Bring your own Keycloak or use the bundled one.
Invite Customers
Create organizations and generate Admin Portal access links. Your customers configure their own SAML, OIDC, or SCIM settings.
Monitor & Manage
View all connections, audit logs, and observability metrics from one dashboard. Get alerted on issues via webhooks.
Open source. Self-hosted. No strings attached.
RealmSSO is 100% open source under the MIT license. Deploy it on your own Kubernetes cluster, connect it to your Keycloak instance, and never worry about per-connection pricing.