Attribute Mapping when using Keycloak as a SAML SP
Learn how to map user attributes sent via SAML into Keycloak, including email, firstName, and lastName, when using an external identity provider.
Articles
Using Keycloak Identity Brokering to Add GitHub Social Login
Learn how to integrate GitHub login using Keycloak’s Identity Brokering feature with Skycloak, enabling seamless social authentication for your applications.
Configuring Keycloak as a SAML Service Provider
Set up Okta as a SAML Identity Provider and Keycloak as a SAML Service Provider using Identity Brokering. Step-by-step guide for seamless SSO integration.
Keycloak WebAuthn: Enabling Passkeys for 2FA
Learn how to configure and use passkeys as a second-factor authentication method in Keycloak, building on the earlier setup for passwordless login.
Keycloak WebAuthn Passwordless with Passkeys
Learn how to set up and use passkeys in Keycloak for secure, passwordless authentication using WebAuthn and FIDO2 standards.
Multitenancy in Keycloak Using the Organizations Feature
Learn how to implement multitenancy in Keycloak using the Organizations feature, link external identity providers, and streamline B2B authentication securely.
OIDC Discovery and Dynamic Registration: Automating Identity Provider Configuration
Automate identity provider configuration with OIDC Discovery and Dynamic Registration, enhancing security and efficiency while reducing errors.
Session Management in Distributed Systems: Cookies vs Tokens vs Server-Side Sessions
Explore the pros and cons of cookies, tokens, and server-side sessions in distributed systems to optimize security and performance.
Multi-Factor Authentication Integration Patterns for Enterprise Applications
Explore effective multi-factor authentication strategies for enterprises, balancing security, usability, and compliance across various industries.
JWT Token Lifecycle Management: Expiration, Refresh, and Revocation Strategies
Explore effective strategies for managing JWT token lifecycle, focusing on expiration, refresh workflows, and revocation to enhance security and user experience.