ASL Keycloak Console — Source library
Public documentation snapshot: 2026-10-17
ASL Keycloak Console
Manage your private Keycloak server from your phone. Keycloak Console opens your own admin console over your own SSH connection, so it never has to be exposed to the internet.
What Keycloak Console does for you
When a user is locked out at 9 pm, you should not need a laptop and a VPN. Keycloak Console gets you to the admin screen you already use, safely, from Android.
Your console, in your pocket
Opens the Keycloak administration console you already run, through a direct SSH connection to your own server. No ASL relay in between.
Check before you connect
You approve the server’s fingerprint, and keys are protected by Android Keystore.
Stays private
Your admin console is never turned into a public website. It is reached only through the SSH session you start.
Your roles still rule
Your own Keycloak login and roles decide what you can do; the app grants nothing extra.
Quick read-only views
An optional connector shows realms, users, clients and roles at a glance, read-only.
One price, no subscription
A single purchase on Google Play. No account with ASL is needed.
One price, no subscription
What you need. Android 8 or newer, SSH access to your server, and a Keycloak listener using HTTP on the server’s loopback interface. A TLS-only listener on ports 443 or 8443 is not supported; read the setup help before buying.
Reach a private administration console
This independent Android tool connects directly to your authorized SSH server and opens a compatible private Keycloak console through that connection. It does not require an ASL relay and does not turn your administration console into a public website.
Check the connection before signing in
You approve the SSH server fingerprint. Key material is protected using Android Keystore. Your own Keycloak login and server-side roles still determine what you can access; the app does not grant administrator privileges.
What you need
Android 8 or newer, authorized SSH access, and a compatible Keycloak listener using HTTP on the server’s loopback interface. The embedded connection does not support a TLS-only listener on ports 443 or 8443. Read the setup help before purchasing.
Console and connector are different
The embedded console uses the capabilities your Keycloak account already has. The optional advanced connector provides read-only views of supported realm, user, client and role data. Screen rotation disconnects the session; reconnect deliberately.
Independent product
ASL Keycloak Console is an independent paid app from ASL. It is not the Keycloak project, a hosted identity provider, or a replacement for your server’s access policy. Compatibility with Keycloak does not imply endorsement.