diff --git a/.gitignore b/.gitignore
index 308b4ef..8651d02 100644
--- a/.gitignore
+++ b/.gitignore
@@ -13,4 +13,10 @@ HELP.md
 *.iws
 *.iml
 *.ipr
-out/
\ No newline at end of file
+out/
+
+# Ignore Terraform provider and module directories
+.terraform/
+.terraform.lock.hcl
+*.tfstate
+*.tfstate.*
diff --git a/terraform/.terraform.lock.hcl b/terraform/.terraform.lock.hcl
index ba92fe3..d1174bc 100644
--- a/terraform/.terraform.lock.hcl
+++ b/terraform/.terraform.lock.hcl
@@ -59,3 +59,28 @@ provider "registry.terraform.io/inwx/inwx" {
     "zh:d685589ae68db4ee9c4d9c22eeb145bb51c3966f128c85c0a722a9d961317ddd",
   ]
 }
+
+provider "registry.terraform.io/mrparkers/keycloak" {
+  version     = "4.0.1"
+  constraints = "~> 4.0.0"
+  hashes = [
+    "h1:R+ZKzbITzbyzt9qWZzLP1tHBxAjXLn1RXaY/eCEJwD4=",
+    "zh:136b81afb4bdf7b71bcaeefde00a8e097d20199037971a552046ac197d648875",
+    "zh:1cb69126e08c58cf7b67b14ecfa3999ba952f60f5ec2918796ec57486576c202",
+    "zh:1d51c878d0ca7cd3014025e2e01f6d1ee7fc73e7ccb67a1833765c3183224513",
+    "zh:335727454863886d6865cae3a5131cc3cca6dbfe251729669bce5d431a9b91df",
+    "zh:33af47e488fdce76101c9e25b3fa9bc3c9b07caf618e194584d356a261736c13",
+    "zh:68a4583a5026a87c6ce2684c54473eb9cef5408f865d0580fe5d9875c032180c",
+    "zh:68c7b96c6b553018321413d2d208cd4d0ebc83942affd565c8e51d04f18dac3b",
+    "zh:7868a220f477bdc4dc66449bb020fd74fc43168b66869906d025990a67a346d9",
+    "zh:7a7fbe2a8e38bba5928b57fbd1e94956d1e7f72e461145fef0ada8ce7fccb645",
+    "zh:87df541fdb3569204d53fe21aca032c01dc234859085cce6a9febf0ca0129183",
+    "zh:8d0eaa5031a6937dcb06d0ced7ae871328c87a3cb8cd8bceef71b08c094d7a66",
+    "zh:9616d1ff5ed8377920f9b89eac0cf2103969d2cde829dac55e7a2c3e208baa97",
+    "zh:99af64a38b7f5e3a7c714cb485321280a83dfed2efcbe0751923aca725fb6d51",
+    "zh:b3c1977bad48f8df311a9f25e7fa2a57ff175768cc548533f4d4a2b8652e5b9a",
+    "zh:c6b97dd6162934155454f3f891c4f32185af9e48ceb5e2d71dd7dce74f95efcf",
+    "zh:c924c9dabaa64b8dcef39bda9b67af27a714eb87ee1e01bd404b5823dc604b18",
+    "zh:db3b4d02fef69217055ac1536902bb694f3800c5d9929c7032ab31a3bd7147e1",
+  ]
+}
diff --git a/terraform/providers.tf b/terraform/providers.tf
index 6a4ebc7..f13551c 100644
--- a/terraform/providers.tf
+++ b/terraform/providers.tf
@@ -6,4 +6,10 @@ provider "inwx" {
 
 provider "hcloud" {
   token = var.hcloud_token
+}
+
+provider "keycloak" {
+  client_id     = var.keycloak_client_id
+  client_secret = var.keycloak_client_secret
+  url           = var.keycloak_url
 }
\ No newline at end of file
diff --git a/terraform/variables.tf b/terraform/variables.tf
index 92c9822..4b89d1c 100644
--- a/terraform/variables.tf
+++ b/terraform/variables.tf
@@ -79,4 +79,21 @@ variable "argocd_monitoring_keycloak_client_secret" {
   description = "Client secret for ArgoCD monitoring Keycloak client"
   type        = string
   sensitive   = true
-}
\ No newline at end of file
+}
+
+variable "keycloak_client_id" {
+  description = "Client ID for Keycloak admin access"
+  type        = string
+  sensitive   = true
+}
+
+variable "keycloak_client_secret" {
+  description = "Client Secret for Keycloak admin access"
+  type        = string
+  sensitive   = true
+}
+
+variable "keycloak_url" {
+  description = "URL of the Keycloak server"
+  type        = string
+}
diff --git a/terraform/versions.tf b/terraform/versions.tf
index 76a6c02..e4c1753 100644
--- a/terraform/versions.tf
+++ b/terraform/versions.tf
@@ -15,5 +15,9 @@ terraform {
       source  = "hetznercloud/hcloud"
       version = "1.44.1"
     }
+    keycloak = {
+      source  = "mrparkers/keycloak"
+      version = "~> 4.0.0"
+    }
   }
 }
\ No newline at end of file