Blog

Insights on Identity, Security & Keycloak

Tutorials, deep dives, and best practices from the Skycloak team.

Tutorials

Federate or Migrate? Your Legacy User Store Is Now in the Login Path

Federating a legacy user store into Keycloak avoids a big-bang migration, but it puts someone else's database in your login…

George Thomas George Thomas 10 min read
Reception area with a wall of hanging keys, a uniformed clerk behind the desk, and a cheerful spring robot holding a lit key beside a suitcase.
Tutorials

Secure a Spring Boot Todo App with Keycloak and Skycloak

Step-by-step guide: connect a Keycloak-secured Spring Boot app to Skycloak managed Keycloak, from realm and client setup to roles, users,…

Ivan Franchin Ivan Franchin 8 min read
security

Keycloak Password Policy Best Practices

Configure Keycloak password policies the modern way: length over complexity, breached-password and blacklist checks, hashing iterations, and per-realm enforcement.

Guilliano Molaire Guilliano Molaire 9 min read
Global DNS diagram: three Keycloak instances connected to a single distributed SQL cluster.
keycloak-operations

Keycloak 26.7 Stateless Mode: Multi-Region Without Infinispan

Keycloak 26.7's stateless preview kills the external Infinispan requirement for multi-cluster. We tested it on YugabyteDB and mapped a multi-cloud…

Guilliano Molaire Guilliano Molaire 9 min read
idaas powerhouse
comparisons

The Top 11 IDaaS Providers Compared (2026 Edition)

Compare 11 IDaaS providers across three categories: Auth0, Cognito, Clerk, Stytch, WorkOS, and managed Keycloak, with verified 2026 pricing at…

Guilliano Molaire Guilliano Molaire 10 min read
keycloak 25
Definition and Basics

Keycloak Versions: Latest Release, History, and Upgrade Guide

Keycloak's latest version is 26.7.0, released July 9, 2026. See the full version history, support policy, and how to upgrade…

Guilliano Molaire Guilliano Molaire 6 min read
keycloak angular
Tutorials

Keycloak with Angular: Modern Integration Guide (vs MSAL)

Integrate Keycloak with Angular 22 using keycloak-angular v22: provideKeycloak, auto token refresh, functional interceptors, plus when MSAL fits instead.

Guilliano Molaire Guilliano Molaire 9 min read
security-best-practices

Why Password Hashing Is Vital for Security (and How to Do It Right)

Password hashing is the last line of defense when your database leaks. What RockYou, LinkedIn, and Adobe got wrong, plus…

Guilliano Molaire Guilliano Molaire 10 min read
security-best-practices

bcrypt Explained: How It Works and When to Use It in 2026

bcrypt explained: how the cost factor and salt work, the 72-byte limit, what OWASP recommends in 2026, and how to…

Guilliano Molaire Guilliano Molaire 9 min read

Stay ahead on identity & security

Get tutorials, product updates, and Keycloak tips delivered to your inbox.

© 2026 Skycloak. All Rights Reserved. Design by Yasser Soliman