Customers have installed this app in at least 143 active instances.
    by codecentric AGfor Confluence Server 6.1.0 - 7.11.2
    codecentric AG supports this app.

    Get support

    Provides Single-Sign-On with Keycloak or any other OpenID Connect provider

    Provides Single-Sign-On with Keycloak or any other OpenID Connect provider

    Provides Single-Sign-On with Keycloak or any other OpenID Connect provider

    More details

    This add-on provides single-sign-on based on openid-connect (OIDC) for confluence. It is developed against Keycloak (www.keycloak.org) but we test it with Google IDM, WSO2 and CAS as well.

    It provides single-sign-on and single-logout by your SSO provider as well as a mixed form using your Confluence internal database and your SSO provider as well.

    For more documentation see Enterprise-SSO Documentation Space.

    Reviews for cloud

    (2)Sign in to write a review

    There are no reviews yet. Be the first to review this app.

    Reviews for server

    Sign in to write a review
    by Brett Johnson on 2021-03-03
    Does not work with latest version of Confluence. Developer unresponsive to emails.
    Was this review helpful?YesNo
    by Jochen Munz on 2020-06-26
    We are using this plugin to authenticate Confluence against Keycloak 10 instances. Discovery of endpoints works out of the box, a really pleasant setup. Having the option to authenticate optionally via SSO (before fully turning over to it) is a big plus. Highly recommended plugin.
    Was this review helpful?YesNo

    Reviews for Data Center

    (2)Sign in to write a review

    There are no reviews yet. Be the first to review this app.

    Cloud Pricing

    Server Pricing

    Data Center Pricing

    10 users$1025 users$5050 users$50100 users$250250 users$250500 & upAdditional pricing details

    Pricing FAQ

    How does server app pricing work?

    Server products and apps are hosted on your servers. This app is sold as a perpetual license, and the purchase price includes 12 months of maintenance (support and version updates).

    You can renew maintenance after 12 months at 50% of the current purchase price. You can upgrade the tier of your Atlassian product and app licenses at any time. Upgrade prices are calculated based on Atlassian's formula (view example).

    If app pricing changes after your initial purchase, there's a 60-day grandfathering period during which you can renew based on the old pricing.

    How do I determine my server pricing?

    Apps are billed based on the number of users in your Atlassian product. The app tier should match the licensed user tier of the Atlassian product. For example, if you have a Confluence license for 500 users, you should purchase the 500-user tier for apps. Even if fewer users want to use the app than your Atlassian product license, the two licenses should match exactly.

    Can I install this app in a Data Center product?

    This app does not have a Data Center approved version. Only apps meeting a set of performance requirements for large, clustered environments are approved for Data Center.

    However, while server apps are built for single-server deployments, many customers successfully install them in Data Center products. If you're using a Data Center product, Atlassian recommends you contact the vendor to determine compatibility at scale.

    Learn more about Data Center approved apps

    What type of license do I need if I'm using this app in a Data Center product?

    Because this app does not have a Data Center approved version, you should purchase a Server license if you decide to install this app in a Data Center product.

    Learn more about Data Center licensing

    Do you offer academic, community, or open-source licenses for server apps?

    For server apps, academic licenses are available at a 50% discount if you have an academic license for your Atlassian product.

    Community and open-source licenses are available for server apps. Learn more about community and open source licenses.

    Can I extend my free trial?

    For server apps, you can extend your app trial up to 5 times - in other words, for up to six months. Extend your trial by generating a new evaluation license key from Atlassian Marketplace. Click Try it free and you'll be directed to generate a new license. Paste this license key into the app listing in UPM from your Atlassian product, and you're all set.

    How can I buy apps for my legacy Jira Server or Confluence Server license?

    If you own a legacy Jira Server Unlimited (100+ users) or Confluence Server Unlimited (2000+ users) license purchased in 2012 or earlier, legacy app pricing is no longer available. You have two options for app purchasing:

    • Purchase the app at the non-legacy Unlimited (10000+ users) tier.
    • Renew your Jira or Confluence license at a non-legacy tier, then purchase the app at the same tier.

    Learn more

    codecentric AG provides support for this app.

    Vendor support resources


    Find out how this app works.

    See existing Q&A in Atlassian CommunityAsk a question in the Atlassian Community

    Atlassian-hosted discussions connect you to other customers who use this app.


    Version 1.5.0 Confluence Server 6.1.0 - 7.11.2 Released 2019-06-07


    Extended Group Management


    Version 1.5.0:

    • added automatic membership of group 'LoggedInViaOidcSso' for users logged in via SSO
    • added option to add group memberships for users on their first SSO login
    • added option to create nonexistent groups when synchronising group memberships from the OpenID Connect provider
    • various smaller bug fixes and improvements

    Version 1.4.4:

    • fixed an issue where marking the logs in Jira was broken with SSO in 'always'-mode

    Version 1.4.3:

    • fixed an issue where links opened from Microsoft Office products resulted in a 'state mismatch'-error
    • fixed a bug where REST SSO broke the authentication of applications linked to Jira
    • added option to specify a custom access token claim for the group synchronization
    • various smaller bug fixes and improvements


    1. Log into your Confluence instance as an admin.
    2. Click the admin dropdown and choose Atlassian Marketplace. The Manage add-ons screen loads.
    3. Click Find new apps or Find new add-ons from the left-hand side of the page.
    4. Locate Confluence Enterprise SSO with Keycloak via search. The appropriate app version appears in the search results.
    5. Click Try free to begin a new trial or Buy now to purchase a license for Confluence Enterprise SSO with Keycloak. You're prompted to log into MyAtlassian. Confluence Enterprise SSO with Keycloak begins to download.
    6. Enter your information and click Generate license when redirected to MyAtlassian.
    7. Click Apply license. If you're using an older version of UPM, you can copy and paste the license into your Confluence instance.

    To find older Confluence Enterprise SSO with Keycloak versions compatible with your instance, you can look through our version history page.

    Similar apps