Articles
Articles about articles from the Skycloak team.
AWS Cognito Pricing as You Scale: Is It Still the Right Fit?
AWS Cognito pricing tracks monthly active users, and enterprise SSO users get a free tier of only 50. Three checks…
Why SSO Alone Won't Pass a Vendor Security Review
SSO answers one line of a vendor security review. What reviewers also check: enforced SSO, deprovisioning, sessions, audit logs, and…
SOC 2 Type 1 vs Type 2: Which Do You Need First?
SOC 2 Type 1 vs Type 2: Type 1 checks control design on one date, Type 2 checks controls worked…
Stateless MCP: What the 2026-07-28 Spec Changes for Tool Builders
MCP went stateless in the 2026-07-28 spec: no initialize handshake, no Mcp-Session-Id. Here is what changes for MCP servers and…

SCIM Provisioning from Microsoft Entra ID to Keycloak 26.6+
Learn how to configure SCIM provisioning from Microsoft Entra ID to Keycloak 26.6+, including user sync, deprovisioning, and custom attributes

Microsoft Entra ID Explained for Keycloak Engineers (OIDC)
Every Entra ID concept mapped to its Keycloak equivalent: tenants to realms, app registrations to clients, and where the OIDC…
migrating-cloud-foundry-uaa-to-keycloak-review
Editorial Review: Migrating From Cloud Foundry UAA to Keycloak: The Complete Playbook Date: 2026-06-09 Author: Guilliano Molaire (gmolaire) Word Count:…
keycloak-openshift-aro-high-availability-review
Editorial Review: Keycloak on OpenShift and ARO: An HA Architecture That Survives Audits Date: 2026-06-09 Author: Guilliano Molaire (gmolaire) Word…

Protecting Your Applications with Keycloak: A Beginner’s Guide
Learn how to secure applications with Keycloak, map users to local databases, add custom claims, and validate JWTs in Spring…

Keycloak DCR for MCP Servers: Setup with VS Code
Set up Keycloak Dynamic Client Registration (DCR) so MCP clients such as VS Code can register themselves, with Trusted Hosts,…
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.