What is Keycloak? Keycloak is an authorization provider that supports various authentication protocols. You can use it with OAuth, LDAP, Kerberos, etc. It is based on the free WildFly application server. Why is migration a Problem? You can manage Keycloak through an admin ui, or with the provided REST-Api. Keycloak also supports realm export and import. So we could just track keycloak changes through the export file. The difficulty of this approach is, that the realm export has to be done before starting the Keycloak server.