Insights on Identity, Security & Keycloak
Tutorials, deep dives, and best practices from the Skycloak team.
Keycloak MCP Server 401: Fixing the Audience Claim
MCP clients get a 401 from Keycloak-protected servers because of a wrong aud claim. Here is the RFC 8707 cause,…
6 min read
Identity Governance Workflows in Keycloak: Access Requests
Build automated access request and approval workflows with Keycloak using custom required actions, the Admin REST API, and group-based access…
10 min read
Keycloak Authentication Error Handling: Custom Error Pages
Learn how to customize Keycloak error pages, handle OAuth/OIDC errors in your app, and configure brute force protection for secure,…
11 min read
Keycloak with Spring Boot in Docker, Then Managed
Run Keycloak in Docker with a Spring Boot app, then move the same app to managed Keycloak without changing code.…
9 min read
Loi 25 et PIPEDA : ce que la conformité exige de votre système d’identité
Ce que la Loi 25 et la LPRPDE exigent concrètement de votre gestion des identités, où vos données doivent résider,…
9 min read
Keycloak, Quebec Law 25 and PIPEDA: A Practical Compliance Guide
What Quebec's Law 25 and PIPEDA actually require from your identity system, which Keycloak settings satisfy them, and the data…
9 min read
Cross-App Access (ID-JAG) for AI Agents, and Where Keycloak Stands
Cross-App Access (ID-JAG) lets your identity provider broker scoped API access for AI agents instead of per-app consent and refresh-token…
6 min read
Monitoring Keycloak with Prometheus and Grafana
Monitor Keycloak with Prometheus and Grafana: enable metrics, track authentication KPIs, build dashboards, and define SLOs for your identity stack.
9 min read
Keycloak SPI ID Collision: Redis Cache Ran on Infinispan
Keycloak's ProviderManager dedupes SPI factories by provider ID before isSupported() runs. A shared ID of "default" silently dropped our Redis…
11 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.