Partner with VSHN on Managed Keycloak
You bring the customer relationship and Keycloak expertise: SSO/federation design, identity migration, custom themes and branding, OIDC/SAML integration. VSHN brings 24/7 managed operations, Swiss data residency, and a 99.99% SLA. Together you deliver a complete managed Keycloak solution without either side building capabilities you don't have.
How we collaborate
Lead Partner model. For each project, one of us is the customer's single point of contact. Who leads depends on the project, agreed per engagement. The Lead Partner drives the project, handles invoicing, and owns first-level support.
Joint delivery. You handle consulting, integration, and project management. VSHN handles infrastructure operations, monitoring, backups, and SLA. Or the other way around, depending on the project. Roles are agreed per engagement, not locked into a rigid structure.
Flexible billing. Invoice the customer together or separately, agreed per project. Both models are supported: each party invoices their share directly, or one party invoices the full amount and redistributes.
Protected relationships. No undercutting. Your customer stays your customer. Existing relationships are respected on both sides, with contractual protections for both parties.
Division of labor for Managed Keycloak
| Your role | VSHN's role |
|---|---|
| SSO/federation design | Keycloak instance operations |
| Identity migration | HA clustering and failover |
| Custom themes and branding | Automated backups and restore |
| OIDC/SAML integration | Upgrades and security patches |
| Project management | Monitoring, alerting, and 24/7 incident response |
Keep the client relationship. Hand over the identity provider.
You integrated single sign-on for your client, and Keycloak stayed with you afterwards. When login is down, everything behind it is down, and the call goes to the firm that set it up, whether or not anyone there is on call.
Then the Lead Partner model runs in one direction: you stay the client's single point of contact and invoice them, and VSHN operates Keycloak behind you under a contract with you.
We operate what we know. Keycloak has to be set up to the VSHN standard before we can run it around the clock, because the engineer who answers at 03:00 has to know the system. An existing installation is brought to that standard first.
Partners delivering Managed Keycloak
Inventage. Zürich. Keycloak is their focus: SSO and federation design, custom authenticators and protocol mappers, and an open-source Keycloak distribution template on GitHub. Builds on VSHN-operated instances.
nxt. Zürich. Software engineering across the full lifecycle, with Keycloak IAM among its consulting services: adding authentication to applications without running the identity provider yourself.
Gepardec. Keycloak consulting and Java modernization. Delivers identity architecture design and OIDC/SAML integrations on VSHN-operated Keycloak infrastructure.
See all VSHN partners at servala.com/partners.
Become a partner
Interested in delivering managed Keycloak together? Let's explore how we complement each other.
Book a partnership discovery call or start a partnership conversation.