Subscriptions or Entitlements Requirements for Red Hat build of Keycloak

Updated -

On November 15th 2023, Red Hat announced the General Availability of Red Hat build of Keycloak as its Identity and Access Management (IAM) commercial offering product based on the Keycloak open source project. The Red Hat build of Keycloak release replaces the existing Red Hat Single Sign-On, which will end-of-life after version 7.6 end of maintenance support. While preserving the power and functionality of its predecessor, Red Hat Single Sign-On, Red Hat build of Keycloak is faster, more flexible, and is optimized for deployment in OpenShift environments, while also certified on RHEL.

This article covers the subscriptions requirements for entitlement to Red Hat build of Keycloak.

Entitlement for Red Hat build of Keycloak is included in the Red Hat Runtimes, Red Hat Application Foundations, and Red Hat OpenShift Container Platform (OCP) subscriptions, as well as the various subscriptions bundles that include Runtimes and OCP.
Red Hat build of Keycloak is not available for purchase as a separate and distinct product outside of the bundles in which it is included.

Customers with the following Red Hat subscriptions are entitled to Red Hat build of Keycloak:

  • Red Hat Runtimes
  • Red Hat OpenShift Container Platform (OCP)
  • Any Red Hat subscription that includes any of the above, e.g. Red Hat Application Foundation (RHAF), Red Hat OpenShift Platform Plus (OPP)

Customers running with the following variants of managed Red Hat OpenShift are also entitled to Red Hat build of Keycloak, when run in the same environments:

  • Red Hat OpenShift Service on AWS (ROSA)
  • Microsoft Azure Red Hat OpenShift (ARO)
  • Red Hat OpenShift Dedicated (OSD)
  • Note: Red Hat build of Keycloak is treated as customer installed software. It is fully supported by Red Hat, but is not operationally managed by Red Hat in these managed OpenShift environments. There is no Red Hat build of Keycloak as a managed-service offering.

Note: The Multi-Site feature, as introduced in the release of Red Hat build of Keycloak 24.0, requires to also use of Red Hat Data Grid as an integrated component with Red Hat build of Keycloak for Multi-Site support. Refer to the Red Hat Application Services subscription guide for Red Hat Data Grid subscriptions coverage.



IMPORTANT NOTES:

  • Red Hat build of Keycloak is not part of the JBoss Core Services collection (JBCS).
  • Red Hat build of Keycloak usage counts towards the cores of the subscriptions bundles including it (i.e Runtimes, RHAF, etc.). This is a change compared to its predecessor, Red Hat Single Sign-On.
  • As per its predecessor, Red Hat Single Sign-On, the Red Hat build of Keycloak is not included in OpenShift Kubernetes Engine (OKE).
  • Red Hat Single Sign-On is still supported by Red Hat with maintenance updates as per its lifecycle. Red Hat Single Sign-On customers are encouraged to plan for migration to Red Hat build of Keycloak as soon as possible.
  • IBM Cloud Pak users (e.g 'Cloud Pak for Integration', 'Cloud Pak for Applications', 'Cloud Pak for Business Automation', etc.) are also entitled to use Red Hat build of Keycloak through their Openshift restricted license for the IBM Cloud Pak bundle. Please consult your IBM Cloud Pak vendor for more details the bundled OpenShift subscription as per the IBM program usage terms.
  • IBM Cloud Pak for Applications also comes with entitlement through Red Hat Runtimes. This is only specific to Cloud Pak for Applications, since most of the other Cloud Pak offerings do not come with Runtimes entitlements. Please refer to KBase article for Red Hat Runtimes for IBM Cloud Pak for Applications Customers.

Comments