Guilliano Molaire
Founder at Skycloak
Guilliano is the founder of Skycloak and a cloud infrastructure specialist with deep expertise in product development and scaling SaaS products. He discovered Keycloak while consulting on enterprise IAM and built Skycloak to make managed Keycloak accessible to teams of every size.
Articles by Guilliano Molaire
SCIM API: Building and Testing a SCIM 2.0 Endpoint
What a SCIM API has to implement to satisfy Okta and Entra ID: endpoints, PATCH semantics, filtering, pagination, error shapes,…
User Provisioning: How Accounts Get Created and Removed
User provisioning is how accounts get created, updated and deactivated across your apps. The four approaches, what each costs, and…
SCIM vs SAML: What Each Protocol Actually Does
SCIM vs SAML explained: SAML authenticates users at login, SCIM provisions and deprovisions their accounts. What each protocol sends, and…
Why Keycloak Breaks MCP Servers (the Audience Claim) and How RFC 8707 Fixes It
MCP clients get a 401 from Keycloak-protected servers because of a wrong aud claim. Here is the RFC 8707 cause,…
Cross-App Access (ID-JAG) for AI Agents, and Where Keycloak Stands
Cross-App Access (ID-JAG) lets your identity provider broker scoped API access for AI agents instead of per-app consent and refresh-token…
Add Authentication to a Python App on Fly.io with Keycloak
Add OIDC login to a Python app on Fly.io with Keycloak: Flask + Authlib walkthrough, fly secrets, the ProxyFix redirect-URI…
Managing Keycloak Secrets the Right Way (Vault SPI)
Keep secrets out of Keycloak config: use the Keycloak vault SPI to resolve database, SMTP, and client secrets from a…
Keycloak Password Policy Best Practices
Configure Keycloak password policies the modern way: length over complexity, breached-password and blacklist checks, hashing iterations, and per-realm enforcement.
How Much RAM and CPU Does Keycloak Need in Production?
How much RAM and CPU does Keycloak need? What actually drives resource use, realistic starting points, JVM heap sizing, and…
Keycloak 26.7 Stateless Mode: Multi-Region Without Infinispan
Keycloak 26.7's stateless preview kills the external Infinispan requirement for multi-cluster. We tested it on YugabyteDB and mapped a multi-cloud…