Guilliano Molaire
Founder at Skycloak
Guilliano is the founder of Skycloak and a cloud infrastructure specialist with deep expertise in product development and scaling SaaS products. He discovered Keycloak while consulting on enterprise IAM and built Skycloak to make managed Keycloak accessible to teams of every size.
Articles by Guilliano Molaire
Home Realm Discovery on Keycloak: Email Domain Routing
Home realm discovery sends [email protected] to the right corporate IdP without a picker. How Keycloak 26.8 Organizations does it, and…
JIT Provisioning vs SCIM: When Is First Login Enough?
Just-in-time provisioning creates a user at first login, but never removes one. Compare JIT and SCIM, and decide which your…
Session Hijacking: Why MFA Doesn’t Save a Stolen Session
Session hijacking uses a stolen cookie or token, so MFA never fires. How infostealers do it, what limits the damage,…
What Is Credential Stuffing? Vs Brute Force, and How to Stop It
Credential stuffing replays leaked username and password pairs against your login. How it differs from brute force, what to watch…
How to Choose an SSO Provider: Enterprise SSO for B2B SaaS
Choosing an SSO provider for B2B SaaS? Use this checklist of protocols, flows, provisioning and pricing models, plus questions to…
IdP-Initiated vs SP-Initiated SSO: Which Flow to Use
SP-initiated SSO starts in your app; IdP-initiated SSO starts in the customer's portal. Learn the security tradeoffs and what to…
What Is an Identity Provider? IdP and SSO Examples
What is an identity provider? Learn what SSO IdP means, follow a sign-in through SAML and OIDC, and compare workforce…
What Is IDaaS? Identity as a Service Explained
IDaaS (identity as a service) means a vendor runs your login, MFA, SSO and tokens in the cloud. See what…
Better Auth 1.7.7: OAuth State vs Magic-Link Tokens
Better Auth 1.7.7 stops OAuth state values being redeemed as magic-link tokens. What went wrong, how to upgrade, and how…
Entra SSPR Registered Methods and Keycloak Account Recovery
Entra SSPR will stop accepting unregistered directory phones and emails for password reset. What changes, and how to apply the…