Blog

Insights on Identity, Security & Keycloak

Tutorials, deep dives, and best practices from the Skycloak team.

Definition and Basics

Keycloak MCP Server 401: Fixing the Audience Claim

MCP clients get a 401 from Keycloak-protected servers because of a wrong aud claim. Here is the RFC 8707 cause,…

Guilliano Molaire Guilliano Molaire 6 min read
Tutorials

Identity Governance Workflows in Keycloak: Access Requests

Build automated access request and approval workflows with Keycloak using custom required actions, the Admin REST API, and group-based access…

Guilliano Molaire Guilliano Molaire 10 min read
Tutorials

Single Sign-On for HashiCorp Vault with Keycloak (OIDC)

Set up OIDC single sign-on for HashiCorp Vault with Keycloak: configure the OIDC auth method, map Keycloak groups to Vault…

Guilliano Molaire Guilliano Molaire 13 min read
Cross-Region Identity Replication: Global Authentication Architecture
Tutorials

Keycloak MFA: Configuration Patterns for Enterprise

How to set up Keycloak MFA: OTP policies, WebAuthn, conditional flows that apply MFA selectively, client-specific overrides, and detecting MFA…

Guilliano Molaire Guilliano Molaire 21 min read
security-best-practices

Cloud Identity Management: How to Choose a Cloud IAM Solution

Cloud identity management moves authentication, authorization, and user lifecycle to a hosted service. How cloud IAM solutions differ, and how…

Guilliano Molaire Guilliano Molaire 8 min read
Tutorials

Monitoring Keycloak with Prometheus and Grafana

Monitor Keycloak with Prometheus and Grafana: enable metrics, track authentication KPIs, build dashboards, and define SLOs for your identity stack.

Guilliano Molaire Guilliano Molaire 9 min read
Authentication Error Handling: User Experience and Security Balance
Tutorials

Authentication Error Handling in Keycloak: Customizing Error Pages and User Experience

Learn how to customize Keycloak error pages, handle OAuth/OIDC errors in your app, and configure brute force protection for secure,…

Guilliano Molaire Guilliano Molaire 11 min read
company-news

Skycloak Is Now HIPAA-Compliant: HIPAA-Ready Managed Keycloak for Healthcare

Skycloak is now HIPAA-compliant and BAA-ready. Run managed Keycloak for healthcare workloads with encryption, MFA, audit logging, and a signed…

Guilliano Molaire Guilliano Molaire 4 min read
Tutorials

Keycloak Admin REST API: Manage Realms, Clients, and Users with curl

Use the Keycloak Admin REST API to create realms, clients, roles, groups, and users with curl. Every request tested against…

Ivan Franchin Ivan Franchin 11 min read

Stay ahead on identity & security

Get tutorials, product updates, and Keycloak tips delivered to your inbox.

© 2026 Skycloak. All Rights Reserved. Design by Yasser Soliman