Guilliano Molaire
Founder at Skycloak
Guilliano is the founder of Skycloak and a cloud infrastructure specialist with deep expertise in product development and scaling SaaS products. He discovered Keycloak while consulting on enterprise IAM and built Skycloak to make managed Keycloak accessible to teams of every size.
Articles by Guilliano Molaire
Fixing Keycloak 502 Bad Gateway Errors
Fix Keycloak 502 Bad Gateway errors behind a reverse proxy: proxy headers, timeouts, health checks, hostname configuration, and startup timing…
WorkOS Alternatives: Open-Source and Self-Hosted
The best WorkOS alternatives for B2B SSO, SCIM, and multi-tenancy. Open-source and self-hosted options like Keycloak, Authentik, Ory, and more…
Fixing CORS Errors with Keycloak
Fix Keycloak CORS errors: configure Web Origins on the client, understand preflight requests, and resolve 'blocked by CORS policy' issues…
Zitadel Alternatives for Developers
Compare the best Zitadel alternatives for developers: Keycloak, Authentik, Ory, FusionAuth, SuperTokens, Auth0, and WorkOS, by license, deployment, and protocols.
Token Introspection vs Local JWT Validation in Keycloak
Keycloak token introspection vs local JWT validation: how each works, the latency and revocation trade-offs, and which to use for…
Keycloak vs Authelia: Self-Hosted Auth Comparison
Keycloak vs Authelia compared across architecture, protocols, MFA, federation, and footprint. A fair, honest guide to picking the right self-hosted…
Keycloak Offline Tokens Explained
What Keycloak offline tokens are, how the offline_access scope works, how they differ from regular refresh tokens, and when to…
How to Run the Keycloak Admin Console on a Separate Hostname Behind nginx (KC_HOSTNAME_ADMIN)
KC_HOSTNAME_ADMIN does work behind nginx. Serve the Keycloak admin console on a separate hostname with the proxy headers and server…
Keycloak Refresh Token Rotation: Setup and Best Practices
How to configure refresh token rotation in Keycloak: revoke-on-use, reuse detection, token lifetimes, SPA vs confidential clients, and security best…
Keycloak Client Scopes vs Roles: When to Use Each
Keycloak client scopes vs roles explained: what each does, how they shape token claims and scopes, and when to use…