George Thomas
Senior IAM Engineer at Skycloak
George is a senior IAM engineer with 23+ years in software engineering, including 14+ years specializing in identity and access management. He designs and modernizes enterprise IAM platforms with deep expertise in Keycloak, OAuth 2.0, OpenID Connect, SAML, and identity federation across cloud and hybrid environments. Previously at Trianz and a long-term contributor to Entrust IAM product engineering, George authors Skycloak's technical Keycloak tutorials.
Articles by George Thomas
Let Product Teams Onboard Apps Without Handing Out Keycloak Admin
Product teams need Keycloak clients. Your IAM team shouldn't hand out admin. Compare the two patterns that work: a self-service…
Keycloak Is Not Your Identity Store: Shadow Accounts and the Broker Pattern
Keycloak rarely owns your users. It keeps shadow accounts, authenticates, and issues a JWT. Where identity, authentication, and authorization really…
Federate or Migrate? Your Legacy User Store Is Now in the Login Path
Federating a legacy user store into Keycloak avoids a big-bang migration, but it puts someone else's database in your login…
Token and Claims Modeling in Keycloak: Reproducing Legacy IdP Behavior
Reproduce legacy IdP tokens in Keycloak so apps survive cutover. Build a claim contract, map UAA/SiteMinder/Okta claims, and diff old…
Dual-Run IAM Migration: Switching Identity Providers Without Downtime
An IAM migration strategy for large estates: run old and new IdPs at once, cut apps over in waves, and…
Keycloak and SiteMinder Federation: SAML and OIDC Integration Guide
Keycloak SiteMinder integration without a rip-and-replace: run both side by side, federate over SAML or OIDC, and migrate apps at…
SCIM Provisioning from Microsoft Entra ID to Keycloak 26.6+
Learn how to configure SCIM provisioning from Microsoft Entra ID to Keycloak 26.6+, including user sync, deprovisioning, and custom attributes
Learning Microsoft Entra ID Through a Keycloak Lens (OIDC)
A practical guide for Keycloak professionals learning Microsoft Entra ID, covering claims, app registrations, roles, scopes, and SSO.
Protecting Your Applications with Keycloak: A Beginner’s Guide
Learn how to secure applications with Keycloak, map users to local databases, add custom claims, and validate JWTs in Spring…
Securing MCP Servers with Keycloak DCR
Learn how to secure MCP servers with Keycloak using Dynamic Client Registration (DCR), enabling anonymous AI agents to authenticate safely.