User Account Service
Keycloak has a built-in User Account Service which every user has access to. This service allows users to manage their account,
change their credentials, update their profile, and view their login sessions. The URL to this service is
The initial page is the user’s profile, which is the
Account left menu item. This is where they specify basic data about themselves. This screen can be extended
to allow the user to manage additional attributes. See the Server Developer Guide for more details.
Password left menu item allows the user to change their password.
Authenticator menu item allows the user to set up OTP if they desire. This will only show up if OTP is a valid authentication mechanism for your realm.
Users are given directions to install FreeOTP or Google Authenticator on their mobile device to be their OTP generator.
The QR code you see in the screen shot can be scanned into the FreeOTP or Google Authenticator mobile application for nice and easy setup.
Federated Identity menu item allows the user to link their account with an identity broker (this is usually used to link social provider
accounts together). This will show the list of external identity providers you have configured for your realm.
Sessions menu item allows the user to view and manage which devices are logged in and from where. They can perform logout of these sessions from this screen too.
Applications menu item shows users which applications they have access to.
Like all UIs in Keycloak, the User Account Service is completely themeable and internationalizable. See the Server Developer Guide for more details.