User Portal Extension for Keycloak

Self-Service Portal for Delegated Administrators and Partners

A complete administration portal for partner admins and sub-admins. Manage users, roles, invitations and licenses – in a dedicated, clear interface. What you gain:
  • Partners manage their teams themselves – fewer support tickets
  • Tenant context: admins see only their users
  • Fully UI-based, no technical know-how required
Keycloak Extension Delegated Admin Self-Service Multi-Tenant B2B portal

Book a free
consultation call now

Online and fast

available time slots
Choose a time slot
Your benefits with the User Portal Extension:
Delegated user management: partner admins manage their teams themselves
Tenant isolation: admins see only users in their tenant
Role and invitation management in self-service
Clear interface: no technical prior knowledge required
Audit logs for compliance requirements

What does the User Portal offer?

More than “Admin Light” – a complete administration interface

The portal is a standalone interface for delegated administrators. All functions for team management are included – without access to the Keycloak admin console.

Functions for partner admins

User management in the tenant context

Delegated administrators can:
Manage users
Create, edit, deactivate, delete
Assign roles
Select from defined role sets
Send invitations
By email with predefined roles
Security at a glance
View MFA status and last logins

Configuration by primary admins

What delegated admins are allowed to do

Primary administrators control which functions are available:
Which actions are permitted (create, delete, deactivate)
Which roles may be assigned
Whether MFA settings can be changed
Which clients can be managed
Define role conflicts: which roles exclude each other

Typical use cases

Where the User Portal is used

B2B platforms: partners manage their employees themselves
Franchise: locations with their own admin and user management
SaaS: customer admins without Keycloak access
Enterprises: departments with limited permissions

Can be combined with other extensions

For complete delegation scenarios

Tenant Extension – Admins see only their tenant
Invitation Extension – Invite new team members directly
License Management – Check and manage quotas
MFA Selection – View users’ security status
View all extensions

Frequently asked questions about the User Portal

Delegation, security, permissions

Can partner admins access the regular Keycloak console?

How does the portal differ from the Keycloak admin console?

How are changes logged?

Can different admin roles have different permissions?

Does the portal work without the Multi-Tenant Extension?

User Portal Extension for your project

Let’s check together whether the portal fits your requirements.

Frank Tripp Head of Identity & Access Management c.frank.tripp@loginfactor.com 05251 5449490
Frank Tripp