Guilliano Molaire

Guilliano Molaire

Founder at Skycloak

Guilliano is the founder of Skycloak and a cloud infrastructure specialist with deep expertise in product development and scaling SaaS products. He discovered Keycloak while consulting on enterprise IAM and built Skycloak to make managed Keycloak accessible to teams of every size.

439 articles publishedLinkedInGitHub
KeycloakProduct DevelopmentSaaSSingle Sign-OnOAuth 2.0SAMLAWS InfrastructureCloud Security

Articles by Guilliano Molaire

Connect claude.ai to Keycloak with CIMD: Fix the JWT Grant Error
troubleshooting

Connect claude.ai to Keycloak with CIMD: Fix the JWT Grant Error

claude.ai fails on Keycloak CIMD with a JWT grant error in public clients. Here is the tested fix: Keycloak 26.8,…

Guilliano MolaireGuilliano Molaire7 min read
Keycloak 26.8.2 Admin API Returns 401 for Service Accounts: The kc-admin-api Scope Fix
keycloak-updates

Keycloak 26.8.2 Admin API Returns 401 for Service Accounts: The kc-admin-api Scope Fix

After upgrading to Keycloak 26.8.2, service account tokens get 401 from the Admin REST API. Why the new audience check…

Guilliano MolaireGuilliano Molaire7 min read
Tutorials

Keycloak as an Identity Provider for Cloudflare Access

Use Keycloak as an OIDC identity provider for Cloudflare Access (Zero Trust): configure the integration, pass groups for policies, and…

Guilliano MolaireGuilliano Molaire10 min read
Tutorials

Securing Hasura GraphQL with Keycloak JWT Claims

Secure Hasura GraphQL with Keycloak: configure JWT mode, add the x-hasura-* custom claims via a protocol mapper, and map Keycloak…

Guilliano MolaireGuilliano Molaire10 min read
Ivanti Connect Secure CVE-2026-111357 Exploited: What to Do
security

Ivanti Connect Secure CVE-2026-111357 Exploited: What to Do

CISA added Ivanti Connect Secure CVE-2026-111357 and CVE-2026-118527 to the KEV catalog on 30 October 2026. Upgrade, reset, rotate and…

Guilliano MolaireGuilliano Molaire13 min read
security

BeyondTrust CVE-2026-102764: Patch, Audit, Rotate

CVE-2026-102764 is an exploited auth bypass in BeyondTrust Remote Support 26.2.3 and earlier. Patch BT26-05, then what to audit and…

Guilliano MolaireGuilliano Molaire15 min read
security

Regulatory Compliance in IAM: What Auditors Check at Login

Regulatory compliance in IAM means proving who could log in, with what rights, and when. What SOC 2, HIPAA, PCI…

Guilliano MolaireGuilliano Molaire18 min read
security

Keycloak Client Authentication Without Secrets: Signed JWT (private_key_jwt)

Replace Keycloak client secrets with Signed JWT (private_key_jwt): the client signs a short assertion with its own key. Setup, code,…

Guilliano MolaireGuilliano Molaire9 min read
Definition and Basics

Authentication vs Authorization: Why Valid Logins Get 403

Authentication proves who is calling, authorization decides what they may do. See a Keycloak token pass every check and still…

Guilliano MolaireGuilliano Molaire18 min read
security

PHP2Shell (CVE-2026-109618): Patch PHP, Rotate Login Secrets

PHP2Shell (CVE-2026-109618, CVE-2026-109619): unauthenticated RCE in PHP. Fixed in 8.2.35, 8.3.36, 8.4.27, 8.5.12. Patch order, mitigations, what to rotate.

Guilliano MolaireGuilliano Molaire22 min read
© 2026 Skycloak. All Rights Reserved. Design by Yasser SolimanKeycloak™ is a trademark of the Linux Foundation. Skycloak is not affiliated with the Keycloak project.