As this may come up I wanted to clarify the relationship between Keycloak and RH-SSO. Keycloak is the community project and is freely available for anyone to use. RH-SSO is built directly from Keycloak source and each RH-SSO version is based on a specific Keycloak version (https://www.keycloak.org/support.html). There are no feature add-ons or any code that is not open source, everything is done in the open. Other than branding, the only difference between Keycloak and RH-SSO is that for productised builds Red Hat builds all dependencies from source internally, while for community projects we use available public releases of dependencies (from Maven Central mostly).