Articles by Guilliano Molaire
Skycloak Identity Providers Recipe: Add OIDC or SAML IdP in 5 Minutes
Canonical step-by-step recipe for adding any OIDC or SAML identity provider to Skycloak, with Google, Entra ID, and Okta examples…
10 min readDevice Code Phishing and Passkey Lures: Harden Keycloak Against AiTM
Microsoft's September 2026 report shows passkey-themed lures driving AiTM and device-code attacks. Here is the Keycloak realm hardening that answers…
12 min readKeycloak Admin API v2: Declarative OIDC and SAML Clients with the Operator
Keycloak 26.7 shipped an experimental Admin API v2 and Operator CRs for clients. Here is what KeycloakOIDCClient actually does, and…
12 min readNIST IR 8587 Token Protection: A Keycloak Control Map
NIST finalized IR 8587 on 15 September 2026. Here is what it asks of identity providers, mapped to the Keycloak…
14 min readAgentic Commerce Authentication: Tokens vs Payment Mandates
AI shopping agents need two separate proofs: a token saying who acts for whom, and a signed mandate saying what…
9 min readOkta Managed MCP Server vs Keycloak for Conversational IAM
Okta's hosted MCP server lets you administer your org in natural language. Here is what it does, and how the…
9 min readEntra Is Retiring SMS MFA: A Keycloak Passkey Migration Plan
Microsoft retires its own SMS and voice MFA delivery on 1 February 2027. Here is what that actually changes, and…
11 min readAuth0 B2B Connect and Tenancy-as-a-Service vs Keycloak Organizations for Multi-Tenant SaaS
Auth0 packaged B2B tenancy across 2026. Keycloak 26.7 answered the same delegated-admin problem with organization-scoped admin permissions. How they compare.
9 min readEUDI Wallet Relying Party with Keycloak: Where OpenID4VP Support Actually Stands
Keycloak's OID4VP wallet verifier is merged upstream behind an experimental flag but ships in no release as of 26.7.3. Here…
9 min readKeycloak CIMD for MCP: Client ID Metadata Documents for Claude Code and VS Code
Keycloak has shipped experimental CIMD support since 26.6 behind the cimd flag. Here is the client policy that lets Claude…
11 min read