Guilliano Molaire
Founder at Skycloak
Guilliano is the founder of Skycloak and a cloud infrastructure specialist with deep expertise in product development and scaling SaaS products. He discovered Keycloak while consulting on enterprise IAM and built Skycloak to make managed Keycloak accessible to teams of every size.
Articles by Guilliano Molaire
Stateless MCP: What the 2026-07-28 Spec Changes for Tool Builders
MCP went stateless in the 2026-07-28 spec: no initialize handshake, no Mcp-Session-Id. Here is what changes for MCP servers and…
SPIFFE/SPIRE Workload Identity: What a Compromised Node Actually Breaks
Unit 42 showed a root-compromised Kubernetes node can spoof SPIFFE/SPIRE workload identities via cgroup tricks. Here is what actually breaks,…
Keycloak Authentication Error Handling: Custom Error Pages
Customize Keycloak error pages, handle OAuth/OIDC errors in your app, and configure brute force protection for secure, user-friendly authentication.
How Many Nines Does Your Keycloak SLA Actually Need?
Four nines vs five nines for authentication: what each SLA tier really costs, which Keycloak architecture delivers it, and when…
Migrating From Azure AD B2C to Keycloak
Migrate from Azure AD B2C to Keycloak: export users and custom policies, recreate user flows as authentication flows, handle password…
Keycloak MCP Server 401: Fixing the Audience Claim
MCP clients get a 401 from Keycloak-protected servers because of a wrong aud claim. Here is the RFC 8707 cause,…
Identity Governance Workflows in Keycloak: Access Requests
Build automated access request and approval workflows with Keycloak using custom required actions, the Admin REST API, and group-based access…
Loi 25 et PIPEDA : ce que la conformité exige de votre système d’identité
Ce que la Loi 25 et la LPRPDE exigent de votre gestion des identités, où vos données doivent résider, et…
Keycloak, Quebec Law 25 and PIPEDA: A Practical Compliance Guide
What Quebec's Law 25 and PIPEDA require from your identity system, which Keycloak settings satisfy them, and the data residency…
Cross-App Access (ID-JAG) for AI Agents, and Where Keycloak Stands
Cross-App Access (ID-JAG) lets your identity provider broker scoped API access for AI agents instead of per-app consent and refresh-token…