Keycloak as a Service: pricing changes from 1 November 2026

2026.10.05 Clever Cloud Bannière Blog Tarification Keycloak EN
Since its launch, Keycloak as a Service has become one of the fastest-growing managed add-ons on the Clever Cloud platform.

Developed with Please Open It, a specialist in SSO and identity management, the service lets you deploy a complete IAM solution on dedicated infrastructure in just a few clicks, while Clever Cloud and Please Open-It handle its operation, updates and ongoing maintenance.

As discussed when Keycloak as a Service became generally available, we have worked on a pricing model designed to make the service accessible to developers, solopreneurs, non-profit organisations, businesses and larger enterprises alike.

This pricing will come into effect on November 1, 2026. The first invoice reflecting the new pricing will therefore be issued in early December 2026.

We also recommend reviewing the number of active users across your instances to estimate the impact of the new pricing structure on your bill. This information will be added to the Keycloak dashboard before the new pricing takes effect.

Why the pricing is changing

Keycloak as a Service is more than simply hosting a Keycloak instance.

Each service relies on several dedicated resources — a Java application, a PostgreSQL database and a File System Bucket — as well as the operation and ongoing maintenance of the service.

This includes:

  • tracking Keycloak versions and validating updates before making them available;
  • handling security vulnerabilities, which is particularly critical for an authentication component;
  • pre-configuring and simplifying many aspects of the service, including themes, plugins, metrics, and realm imports and exports;
  • backups, observability and associated support;
  • features developed around the service, including Secured Multi Instances, IP filtering, metrics and Grafana dashboards;
  • continued product development with Please Open-It.

During the launch phase, part of this managed service was not billed separately. The introduction of this new pricing model now makes it possible to account for the service as a whole and to continue its development.

What is changing in the billing model

Until now, Keycloak as a Service billing was based primarily on the various technical resources used by the service: the Java runtime, PostgreSQL database and storage.

From 1 November, billing will follow a model that is more directly tied to the Keycloak service itself and how it is used.

It consists of two components:

  • a monthly price per service, including up to 100 active users per month;
  • an additional charge per active user, with lower per-user rates at higher user volumes.
Pricing From (inclusive) To (inclusive) Standard monthly price
Price per service — — €47.00
Price per active user 1 100 Included
Price per active user 101 10,000 €0.050
Price per active user 10,001 50,000 €0.020
Price per active user 50,001 250,000 €0.005
Price per active user 250,001 and above €0.001

An active user is a user who has had at least one active session during the month, for example following a login or token refresh.

The full pricing structure is also available on our Pricing page.

When does this pricing take effect?

It is important to distinguish between the date from which usage begins to be metered and the date on which it appears on your invoice.

Date What happens
1 November 2026 Keycloak as a Service usage begins to be metered under the new pricing model. The invoice issued in early November still covers October usage and is therefore not affected.
1 December 2026 Invoices issued from this date onwards include Keycloak as a Service usage metered since 1 November.

In practical terms, the first invoice affected will be the one issued in early December 2026, covering your usage for November.

The variable portion of the price remains directly linked to your actual use of the service.

How can you prepare for the change to your invoice?

No action is required to continue using Keycloak as a Service: your existing services will continue to operate as normal.

However, you can use the coming weeks to review the instances that are currently active within your organisation, particularly any test or staging environments that are no longer in use.

We also recommend checking the number of active users across your instances to estimate the impact of the new pricing structure on your invoice.

If you would like a more precise estimate, our teams can review your configuration and usage levels with you to produce a simulation.

Contact us to review your situation with our teams.

Blog

À lire également

Keycloak as a Service: pricing changes from 1 November 2026

Since its launch, Keycloak as a Service has become one of the fastest-growing managed add-ons on the Clever Cloud platform.
Engineering

What Is the SAML 2.0 Authentication Protocol Used For?

SAML 2.0 (Security Assertion Markup Language) is an open standard based on XML (eXtensible Markup Language) that enables Single Sign-On (SSO) across multiple domains. It delegates authentication to a central identity provider, which sends each application a signed “assertion” proving the user’s identity, without requiring the user to re-enter or share their password with each application.
Engineering Features

UP Programme: meet the 4 startups joining Clever Cloud’s sixth cohort

Kernel, Nijal AI, Qiplim and Arkan are joining the sixth cohort of Clever Cloud’s UP Programme.
Company