YOUR PROJECT + OUR INFRASTRUCTURE
Keycloak VPS
A VPS with Keycloak pre-installed · By Keycloak
One login point for your applications, with SSO and MFA.
Identity and access management with SSO over OpenID Connect and SAML, in production mode with PostgreSQL and a permanent admin created at install.
- SSO over OpenID Connect and SAML, with social login and LDAP
- Permanent administrator created before the console is public
- Production mode and PostgreSQL from the very first start
from R$59.90/mo
Pay with Pix, bank slip or card · You choose the location and the plan on the next screen. Nothing is charged until you confirm.
Ready in minutes
Automatic provisioning once the order is confirmed.
24/7 support
Our own team, by chat and ticket.
Pick the right plan for Keycloak
Every plan includes public IPv4 and IPv6, NVMe storage and a 1 Gbps uplink. Click one to reach the checkout with everything filled in.
How to size your project
The Keycloak container gets half of the machine's memory, between 1 and 4 GB, and the heap uses 70% of that; 2 GB is the plan minimum and 4 GB leaves room. Load grows with active sessions, logins per second and the number of realms and clients. PostgreSQL takes a container of its own.
- Recommended for Keycloak
How to order Keycloak
Pick a plan
vCPU, memory and disk sized for your project. You can grow it later without reinstalling.
Confirm the order
Pix, bank slip or card. Nothing is charged until you confirm, and you have a 7-day guarantee.
Keycloak ready in minutes
The server comes up with Keycloak installed and configured. Access details appear in the panel.
What to use a Keycloak VPS for
Some of the most common uses. The server is yours — run whatever you like on it.
- Give several internal systems, and applications your team builds, a single login (SSO)
- Authenticate APIs and web and mobile apps with OpenID Connect on a server of your own
- Federate an existing LDAP directory and offer social login to your users
- Separate customers or environments into realms, each with its own users and policies
Keycloak VPS specifications
- Virtualisation
- KVM, virtual server with your plan’s resources
- vCPU
- 2 to 48
- Memory
- 2 GB to 192 GB
- Storage
- NVMe, 30 GB to 2 TB
- Network
- 1 Gbps, public IPv4 and IPv6 included; DDoS protection available
- Datacenters
- Belo Horizonte (Brazil) · Dallas (USA)
- System
- Keycloak, pre-installed
- Management
- Web panel, API and MCP, VNC console, snapshots, backups and firewall
- Billing
- Monthly, quarterly, semi-annual or annual (discounted); Pix, bank slip or card
- Support and guarantee
- 24/7, 7-day money-back guarantee
About Keycloak
Keycloak is an open-source identity and access management system: single sign-on over OpenID Connect and SAML, social login, LDAP federation and MFA, all organized in realms. Development teams use it to take login out of each application and put it in one place.
At Master da Web, Keycloak 26.7.4 runs in production mode with PostgreSQL 17 and Caddy in front for HTTPS. The installer uses Keycloak's temporary administrator once, to create the permanent admin user, and deletes it right after; the generated password comes in the order e-mail and the console shows no temporary-admin warning.
What is yours: create a realm for your applications (master stays for administrators), add a second factor to admin, and set up SMTP in each realm for recovery and verification e-mails. A custom domain and PostgreSQL backups are also yours.
Software features
- Keycloak 26.7.4 in production mode (start), with PostgreSQL 17
- Permanent admin user created at install; the temporary admin is deleted
- Generated password sent by e-mail; no temporary-admin warning in the console
- Token issuer fixed to the hostname; opening by IP redirects to it
- Ports 8080 and 9000 (health) on 127.0.0.1 only; Caddy is the public entry
- Container memory limit set to half of the machine's RAM, between 1 and 4 GB
- Realms, OIDC and SAML clients, social login and LDAP federation in the UI
- Second factor and per-realm SMTP set up by you after the first sign-in
Requirements
Platform minimum
- Memory
- 2 GB
- Storage
- 30 GB
Below this the order is refused — the checkout raises the disk for you automatically.
Recommended for production
- vCPU
- 2 vCPU
- Memory
- 4 GB
- Storage
- 30 GB
What we would put it on, not a limit.
What your Keycloak gets at Master da Web
Manage infrastructure from one panel: security, recovery, connectivity and growth. Check prices and availability when configuring your server.
Snapshots
Take a snapshot of Keycloak before a risky update and roll back to it with one click, without reinstalling anything.
Automatic backups
Scheduled copies of the whole server, kept off the host. Restore the complete Keycloak whenever you need to.
Managed firewall
Rules by port and source, applied from the panel, no iptables editing. Open only what Keycloak needs.
Security Center
Continuous external scanning of your server, with findings prioritised and the fix spelled out for each one.
Private network (VPC)
Connect Keycloak to databases and other servers over an isolated network with nothing exposed to the internet. With a VPN Gateway for remote access.
DDoS protection
Volumetric attack mitigation for your Keycloak server. Check protection options and prices when ordering.
Grow without reinstalling
Add vCPU, memory and disk from the panel and pay only the difference, and Keycloak stays exactly as it is.
API and MCP for automation
Create, resize and manage servers through the public API — or straight from an AI assistant, over MCP.
Related applications
OpenBao
OpenBao
Secrets manager forked from Vault, installed already initialized and unsealed, with KV v2, an admin user and the API and web UI over HTTPS.
from R$49.90/moView details →Vaultwarden
Vaultwarden
Server compatible with the Bitwarden apps, with sign-ups closed, the owner already registered and a generated master password, behind HTTPS.
from R$49.90/moView details →Wazuh
Wazuh
Open-source SIEM and XDR with server, indexer and dashboard, passwords generated at install and agents that can only enroll with a password.
from R$169.90/moView details →authentik
authentik
Identity provider with SSO over OIDC, SAML and proxy, with akadmin created at install and the setup page closed before the site opens.
from R$59.90/moView details →
Know what to expect from day one.
Ready infrastructure, with the freedom to configure your application your way.
With your VPS
Your chosen image installed, the plan’s resources and a panel to manage the server. Administrative access is provided after provisioning.
Configure for your business
The order e-mail carries the console address, the admin user and the password. Sign in, create a realm for your applications and add a second factor to admin. SMTP in each realm, a custom domain (KC_HOSTNAME and the Caddyfile) and the PostgreSQL backup are up to you.
Expand when you need to
Backups, snapshot capacity, DDoS protection, private networking and other features are available as you need them. Check prices and availability when configuring your server.
You administer the system and application, including updates and data. For help with configuration or management, talk to our team about the scope of support.