Keycloak is more feature packed than the Ory stack. Ory is thinner than Keycloak. Keycloak is heavy to learn but once you know it, everything is easy. It’s ama

Keycloak is more feature packed than the Ory stack. Ory is thinner than Keycloak. Keycloak is heavy to learn but once you know it, everything is easy. It’s amazingly configurable. It has everything: saml, openid, federation, roles, groups, mappers, extensibility, authorisation services, configurable flows, … What I like about Ory: thin components. Starts really fast, go binaries with zero dependencies. What I didn’t like: extension points are inflexible and everything is a http call. Integration is a pita. Say you have hydra and kratos. You want kratos login but then use hydra tokens to fetch data from keto. Good luck writing the glue code. Kratos has two things Keycloak could borrow: json identities with schemas and external ui pluggability. If Keycloak had those two, I’d never look back.