George Thomas

George Thomas

Senior IAM Engineer at Skycloak

George is a senior IAM engineer with 23+ years in software engineering, including 14+ years specializing in identity and access management. He designs and modernizes enterprise IAM platforms with deep expertise in Keycloak, OAuth 2.0, OpenID Connect, SAML, and identity federation across cloud and hybrid environments. Previously at Trianz and a long-term contributor to Entrust IAM product engineering, George authors Skycloak's technical Keycloak tutorials.

32 articles publishedLinkedIn
KeycloakIdentity and Access ManagementOAuth 2.0OpenID ConnectSAMLIdentity FederationIAM ArchitectureSSO

Articles by George Thomas

DPoP with Keycloak Admin API Using Node.js
Tutorials

DPoP with Keycloak Admin API Using Node.js

Implement DPoP proof-of-possession tokens with Keycloak Admin API using Node.js to prevent token replay attacks and secure API access.

George ThomasGeorge Thomas5 min read
Securing MCP Servers with Keycloak OAuth 2.0
Tutorials

Securing MCP Servers with Keycloak OAuth 2.0

Learn how to secure Model Context Protocol (MCP) servers using Keycloak OAuth 2.0 with token introspection, audience validation, and RFC…

George ThomasGeorge Thomas8 min read
Using SCIM 2.0 with Skycloak (Managed Keycloak)
Tutorials

Using SCIM 2.0 with Skycloak (Managed Keycloak)

Configure SCIM 2.0 in Keycloak using Skycloak with external JWT authentication for automated user provisioning and lifecycle management.

George ThomasGeorge Thomas4 min read
Secure React API Access Using Keycloak (OIDC + PKCE)
Tutorials

Secure React API Access Using Keycloak (OIDC + PKCE)

Learn how to secure React API access with Keycloak using OIDC Authorization Code Flow and PKCE for browser-based single-page applications.

George ThomasGeorge Thomas5 min read
Forward Keycloak Events to SIEM via Skycloak HTTP Webhook
Tutorials

Forward Keycloak Events to SIEM via Skycloak HTTP Webhook

Learn how to forward Keycloak authentication events, server logs, and security telemetry to your SIEM platform using Skycloak HTTP webhook…

George ThomasGeorge Thomas4 min read
Path-Based IP Restriction for Keycloak Admin Console
security

Path-Based IP Restriction for Keycloak Admin Console

Restrict Keycloak admin console access using IP and CIDR-based whitelisting on Skycloak to secure the /admin/* path from unauthorized access.

George ThomasGeorge Thomas3 min read
Fine-Grained Authorization in Keycloak Explained
Tutorials

Fine-Grained Authorization in Keycloak Explained

Understand how Keycloak fine-grained authorization works using UMA policies, scopes, and RPT or JSON-based decisions for secure resource access control.

George ThomasGeorge Thomas5 min read
Using Keycloak Identity Brokering to Add GitHub Social Login
Tutorials

Using Keycloak Identity Brokering to Add GitHub Social Login

Learn how to configure GitHub as an identity provider in Keycloak using identity brokering for seamless social login with Skycloak…

George ThomasGeorge Thomas4 min read
Multitenancy in Keycloak Using the Organizations Feature
Tutorials

Multitenancy in Keycloak Using the Organizations Feature

Keycloak multitenancy with the Organizations feature: one realm per tenant vs organizations, IdP linking, domain routing, and org claims in…

George ThomasGeorge Thomas6 min read
Attribute Mapping in Keycloak During OIDC Identity Brokering
Tutorials

Attribute Mapping in Keycloak During OIDC Identity Brokering

Learn how to map user attributes like email and phone number in Keycloak during OIDC identity brokering with external providers…

George ThomasGeorge Thomas4 min read
© 2026 Skycloak. All Rights Reserved. Design by Yasser SolimanKeycloak™ is a trademark of the Linux Foundation. Skycloak is not affiliated with the Keycloak project.