Keycloak is an open-source identity and access management (IAM) server. It centralizes authentication, single sign-on, user sessions, and account recovery so multiple applications can trust one login system instead of handling passwords separately.
In cyber security, this makes Keycloak a high-value target: if an attacker can bypass authentication, abuse password recovery, or tamper with tokens and roles, they may gain access to many connected services at once. Defenders use Keycloak to enforce strong login policies, multifactor authentication, and consistent account control, but they must also protect custom login and reset workflows. Real attacks often focus on the recovery path because it can become an easier entry point than the main sign-in page.