Currently Keycloak supports securing your web applications running inside JBoss Fuse or Apache Karaf . It leverages Jetty 8 adapter as both JBoss Fuse 6.2.1 and Apache Karaf 3 are bundled with Jetty 8.1 server under the covers and Jetty is used for running various kinds of web applications. For JBoss Fuse 6.3 and Karaf 4, bundled with Jetty 9 server, it leverages Jetty 9 adapter. What is supported for Fuse/Karaf is: Security for classic WAR applications deployed on Fuse/Karaf with Pax Web War Extender. Security for servlets deployed on Fuse/Karaf as OSGI services with Pax Web Whiteboard Extender. Security for Apache Camel Jetty endpoints running with Camel Jetty component. Security for Apache CXF endpoints running on their own separate Jetty engine. Security for Apache CXF endpoints running on default engine provided by CXF servlet. Security for SSH and JMX admin access. Security for Hawt.io admin console . The best place to start is look at Fuse demo bundled as part of Keycloak examples in directory examples/fuse .