Articles by Guilliano Molaire
Keycloak 26.8.1 SAML Logout Fix: One Client Could End Another's Sessions
Keycloak 26.8.1 changes how SAML single logout treats a SessionIndex owned by another client. What the code did before, what…
6 min readDeprovisioning a Customer's Leavers: How to Remove Them From Your Product
A customer wants departed staff removed from your product within a set time. What that commits you to, what you…
7 min readHow Do You Tell Customers You Are Changing Your Login System?
A communication plan for an identity provider migration: who to tell, when, what the notice says, how to prepare support,…
7 min readWhat Is Password Spraying? vs Credential Stuffing, and How to Stop It
Password spraying tries a few common passwords on many accounts, so no lockout fires. How it differs from credential stuffing,…
6 min readWhat Is Session Fixation? How It Differs From Session Hijacking
Session fixation plants a known session ID before the victim logs in. How it differs from session hijacking, where it…
6 min read
Identity Governance Workflows in Keycloak: Access Requests
Build automated access request and approval workflows with Keycloak using custom required actions, the Admin REST API, and group-based access…
10 min readWhat Should Your Board Know About Customer Login Risk?
A plain-language board briefing on customer login risk: the six facts to report, how to name gaps without alarm, and…
7 min readCVE-2026-107121: Keycloak SMTP StartTLS Plaintext Downgrade
Keycloak 26.8.1 fixes CVE-2026-107121: realm SMTP with StartTLS on could still send credentials in plaintext. What changed, who is affected,…
8 min readIs Waiting to Replace Your Identity Provider Cheaper?
Waiting to replace your identity provider is cheaper only while nothing changes. How the cost of staying grows, what moving…
8 min readWhat Login Uptime Can You Promise an Enterprise Customer?
What login uptime a SaaS company can honestly promise an enterprise customer: how to add up your dependencies, the downtime…
8 min read