Overview
Manage modules, widgets, external applications, users and permissions from a single dashboard. Configure your workspace around teams and workflows, and keep every part of the system organized, from access control to day-to-day administration.
Authentication is built to handle every layer of access control without extra tooling. Log in with username and password, or add SSO, OTP/2FA and Magic Link for faster, safer sign-in. Bring your own identity provider, or manage users, groups and roles directly from the dashboard. Every OAuth and OpenID Connect client stays under your control, with built-in audit logs and brute-force protection to keep your architecture secure.
02
Part of the AYCC ecosystem
The authentication module is already included and connected within the complete AYCC ecosystem, no separate setup required. Prefer to build your own combination? Download it standalone in multi-tenant mode and connect it to the individual modules you need to launch a custom, multi-tenant application.
- +Username/password login
- +User registration
- +SSO
- +Password recovery and reset
- +OTP/2FA
- +Magic Link
- +External identity providers
- +User/group/role management
- +OAuth/OpenID Connect clients
- +Access audit and brute-force protection
- +Installation instructions and guide (Starter kit and custom theme on higher plans)
01
From default Keycloak to your brand in minutes
CloakStudio works with the Keycloak you already have, or sets one up for you if you don’t. From there, design every page in the authentication flow from logo and colors to layout and components, and build your own custom Keycloak theme, with a live preview on desktop and mobile. Deploy straight to your realm through one guided flow: design, connect, deploy, done.
02
Because authentication is part of your brand too
Every touchpoint in your product shapes how people see your brand, and authentication is no exception. A generic, out-of-the-box login page can make even the most polished product feel like it’s handing users off to a third-party service. CloakStudio gives you a fully white label Keycloak login and complete control over your Keycloak branding, so authentication looks and feels like the rest of your digital experience, not a step outside of it.
03
Who can use CloakStudio?
It’s built for anyone to use: brand managers, designers, product owners and admins, not just developers. Unlike code-first tools like Keycloakify, which require React and CSS to build a theme, CloakStudio needs no code at all: if you can use Canva, you can redesign Keycloak. And unlike lighter tools like Keycloak Quick Theme, which only let you tweak colors and logos, CloakStudio gives you full control over every screen and layout, not just the surface.
04
Every screen, covered
- Login, registration, password reset, update password and OTP screens
- Email verification, error and terms pages
- Desktop and mobile preview before you deploy
- Guided deployment flow, design, connect, deploy
- Connects to your existing Keycloak instance
- Guided install and setup if you don’t have Keycloak yet
- Compatible with Keycloak 26 and above
05
Made by the team behind AYCC Auth
CloakStudio comes from the same team that built AYCC Auth’s own authentication experience, so it’s designed around real Keycloak deployments, not just theory. Already using AYCC Auth? CloakStudio works there too, alongside any other Keycloak instance you run.
Individual modules
Auth
Whether you’re setting up the full AYCC ecosystem or starting your own multi-tenant build, Authentication is where it begins.
