Guilliano Molaire
Founder at Skycloak
Guilliano is the founder of Skycloak and a cloud infrastructure specialist with deep expertise in product development and scaling SaaS products. He discovered Keycloak while consulting on enterprise IAM and built Skycloak to make managed Keycloak accessible to teams of every size.
Articles by Guilliano Molaire
Which Identity Costs Only Show Up After You Sign?
The identity costs that appear after you sign, from enterprise features to support tiers and renewals, plus seven questions to…
What Is Just-in-Time (JIT) Access? JIT vs Standing Privileges
Just-in-time access grants a permission for one task and a limited time, then removes it. How JIT differs from standing…
What Should Your Security Page Say About Login?
What a SaaS security page should say about login: SSO, MFA, sessions, audit logs and offboarding, plus the claims to…
Who Has to Sign Off When You Replace Your Login Provider?
Who must sign off when you replace your login provider: finance, security, legal, support and app owners, what each needs…
Access Token vs Refresh Token: Key Differences
Access tokens authorize API calls briefly; refresh tokens only obtain new tokens. How they differ, and what Gitea 28.1.0 fixed…
Keycloak Client Secret Rotation in 26.8: How It Works
Keycloak 26.8 makes client secret rotation supported: two secrets overlap during a rotation, but nothing rotates on a timer and…
Nonprofit Single Sign-On: One Login for Members and Donors
Nonprofit single sign-on gives members and donors one account across your website, events and donation tools. Costs on a grant…
What Is a SAML Assertion? Structure and Signatures
A SAML assertion is the identity provider's signed statement about a user. Learn its XML structure, how it differs from…
Who Owns Identity Management Without a Security Hire?
With no security hire, login often has no owner. What an owner covers, how to estimate the time it takes…
Keycloak 26.8.1 SAML Logout Fix: One Client Could End Another’s Sessions
Keycloak 26.8.1 changes how SAML single logout treats a SessionIndex owned by another client. What the code did before, what…