George Thomas

George Thomas

Senior IAM Engineer at Skycloak

George is a senior IAM engineer with 23+ years in software engineering, including 14+ years specializing in identity and access management. He designs and modernizes enterprise IAM platforms with deep expertise in Keycloak, OAuth 2.0, OpenID Connect, SAML, and identity federation across cloud and hybrid environments. Previously at Trianz and a long-term contributor to Entrust IAM product engineering, George authors Skycloak's technical Keycloak tutorials.

38 articles published LinkedIn
Keycloak Identity and Access Management OAuth 2.0 OpenID Connect SAML Identity Federation IAM Architecture SSO

Articles by George Thomas

title

Configuring Keycloak as a SAML Service Provider

4 min read

Step-by-step guide to configure Keycloak as a SAML Service Provider with Okta as the IdP using Identity Brokering for seamless…
Passkey as second factor

Keycloak WebAuthn: Enabling Passkeys for 2FA

3 min read

Step-by-step guide to configuring Keycloak WebAuthn passkeys as a second-factor authentication method using the default browser flow.
Passkey login

Keycloak WebAuthn Passwordless with Passkeys

4 min read

Learn how to configure Keycloak for passwordless authentication using WebAuthn passkeys with FIDO2 standards for phishing-resistant login.
Multi-tenancy

Multitenancy in Keycloak Using the Organizations Feature

6 min read

How to implement Keycloak multitenancy with the Organizations feature: one realm per tenant vs organizations, IdP linking, domain routing, and…
Attribute

Using Custom User Attributes in Keycloak OIDC Tokens

4 min read

Learn how to add custom user attributes to Keycloak OIDC tokens and map them to your client application. Includes Spring…
Attribute mapping from external IDP

Attribute Mapping in Keycloak During OIDC Identity Brokering

4 min read

Learn how to map user attributes like email and phone number in Keycloak during OIDC identity brokering with external providers…

Restrict Keycloak Clients to Specific Users

4 min read

Learn how to restrict Keycloak client access to specific users using client roles, custom authentication flows, and group-based access control.
Keycloak custom extensions

Using Email OTP Keycloak Extension with Skycloak

3 min read

Learn how to install and configure the email OTP Keycloak extension with Skycloak to add email-based multi-factor authentication to your…
1 2 3 4
© 2026 Skycloak. All Rights Reserved. Design by Yasser Soliman