Red Hat Single Sign-On (RH-SSO) provides Web single sign-on and identity federation based on SAML 2.0, OpenID Connect and OAuth 2.0 specifications.


Single Sign-On by Red Hat

Red Hat Single Sign-On (RH-SSO) is based on the Keycloak project and enables you to secure your web applications by providing Web single sign-on (SSO) capabilities based on popular standards such as SAML 2.0, OpenID Connect and OAuth 2.0. The RH-SSO server can act as a SAML or OpenID Connect-based Identity Provider, mediating with your enterprise user directory or 3rd-party SSO provider for identity information and your applications via standards-based tokens.


Authentication Server

Acts as a standalone SAML or OpenID Connect-based Identity Provider.

User Federation

Certified with LDAP servers and Microsoft Active Directory as sources for user information.

Identity Brokering

Integrates with 3rd-party Identity Providers including leading social networks as identity source.

REST APIs and Administration GUI

Specify user federation, role mapping, and client applications with easy-to-use Administration GUI and REST APIs.

Get Started with Red Hat Single Sign-On

For a basic installation, you'll need:

Installation Media

Download the ZIP file.

System Requirements

Your physical or virtual machine should meet the System Requirements.

30-45 Minutes

Installation will take about 30-45 minutes.


  1. 1

    Download and unzip the file.

    Unzip the package in a directory where you want to deploy the server.

  2. 2

    Install and run Red Hat SSO.

    From the RH-SSO/bin directory, enter the terminal command:
    If you are using Windows environment, use:
  3. 3

    Confirm Red Hat SSO has started successfully.

    In a terminal window, check for the services started message, which will be similar to this:

    15:31:07,005 INFO  [] (Controller Boot Thread) WFLYSRV0025: Red Hat Single Sign-On 7.5.0.GA
    (WildFly Core 10.1.2.Final-redhat-00001) started in 10402ms
  4. 4

    Access the admin console to create users and assign roles.

    After the server has started, you can access the admin console.



Create an admin account

Create an admin account on the Red Hat Single Sign-On Welcome page

You need an admin account to create realms and users and to register the applications you want to secure with RH-SSO.

Choose an operating mode

Configure operating modes for Red Hat Single Sign-On

Red Hat Single Sign-On (RH-SSO) supports three operating modes: Standalone, Standalone clustered, and Domain clustered.

Manage configuration at runtime

Application server configuration changes can be applied offline or at runtime using the command line.

Application server configuration changes can be applied offline or at runtime using the command line.

How can we help you?

Support Cases

Get answers quickly by opening a support case with us.

View Open Cases

Open New Case

Live Chat

Directly access our support engineers during weekday business hours.

Learn more

Call or Email

Speak directly with a Red Hat support expert by phone or through email.

Contact Us


Red Hat Single Sign-On Updates

Red Hat Single Sign-On Security Labs

Product Policies and Support Programs

Red Hat Single Sign-On Life Cycle

Red Hat offers subscription services for each major release of Red Hat Single Sign-On.