Keycloak is not FIPS compliant. There's basically two parts that would need to be made FIPS compliant: * SSL - this should be possible at the moment, Google for FIPS and WildFly or EAP to see how to configure it * OIDC/SAML - we use Bouncycastle for crypt which is not FIPS compliant, but looking at http://www.bouncycastle.org/wiki/display/JA1/Frequently+Asked+Questions they have a FIPS compliant version in place On 28 September 2015 at 23:27, Bhanu Kiran <getbhanu30(a)gmail.com&gt; wrote: