Guilliano Molaire
Founder at Skycloak
Guilliano is the founder of Skycloak and a cloud infrastructure specialist with deep expertise in product development and scaling SaaS products. He discovered Keycloak while consulting on enterprise IAM and built Skycloak to make managed Keycloak accessible to teams of every size.
Articles by Guilliano Molaire
What Is a Break-Glass Account? Emergency IdP Admin Access
A break-glass account is an emergency admin login kept outside normal SSO and protected by its own offline credential. When…
Keycloak vs Microsoft Entra ID: The Self-Hosted Case
Keycloak vs Microsoft Entra ID compared: open-source self-hosted IdP vs Microsoft's cloud identity platform. Licensing, control, ecosystem fit, and cost…
The IdP Exit Plan: Avoid Identity Vendor Lock-In
A practical IdP vendor lock-in checklist: password hash export, config and backup portability, retention windows, and the exit questions to…
Keycloak CVE-2026-103884: X.509 CRL Path Traversal When CRL Checking Is On
CVE-2026-103884 lets a crafted client certificate steer Keycloak's X.509 CRL loader outside its conf directory. Who is exposed, the real…
Entra ID Will Block Login Script Injection: Harden Keycloak CSP
Microsoft Entra ID will enforce a strict CSP on sign-in pages in mid-October 2026. How Keycloak sets CSP per realm,…
IAM vs IGA: What Identity Governance and Administration Adds for Growing SaaS Teams
IAM decides who can sign in; IGA shows who should have access, who approved it and that it was removed.…
What Is a User Access Review? A SOC 2 Ready Process for SaaS Teams (Plus Template)
A user access review checks that every account and permission is still needed. Learn the five-step process, review cadence, SOC…
What Is Account Takeover (ATO)? How SaaS Teams Detect and Prevent It
Account takeover (ATO) means an attacker controls a real user's account. How it differs from a breach, the seven entry…
Keycloak SSO for Backstage: The Developer-Portal Auth Guide
Add Keycloak single sign-on to Backstage with the OIDC auth provider: configure it, resolve users to catalog identities, and protect…
Auth0 vs Okta (2026): Which Fits Your B2B SaaS?
Auth0 and Okta share a parent company but not a product. Okta Workforce Identity is for employee apps; Auth0 is…