auth-patterns
Articles about auth-patterns from the Skycloak team.
Agentic Commerce Authentication: Tokens vs Payment Mandates
AI shopping agents need two separate proofs: a token saying who acts for whom, and a signed mandate saying what…
9 min read
EUDI Wallet Relying Party with Keycloak: Where OpenID4VP Support Actually Stands
Keycloak's OID4VP wallet verifier is merged upstream behind an experimental flag but ships in no release as of 26.7.3. Here…
9 min read
Keycloak + OPA: Fine-Grained Authorization Beyond RBAC
Integrate Open Policy Agent with Keycloak for fine-grained authorization. Learn ABAC, ReBAC patterns, Rego policies, sidecar deployment, and decision logging.
10 min read
OAuth for Mobile Apps: Best Practices with Keycloak
Learn mobile OAuth best practices with Keycloak including PKCE, secure token storage, refresh rotation, and biometric binding for iOS and…
11 min read
Zero Trust Authentication with Keycloak
Implement zero trust authentication with Keycloak using continuous verification, context-aware policies, step-up MFA, and real-time session risk scoring.
10 min read
Multi-Tenant Auth Architecture: A Developer’s Guide
Design multi-tenant authentication architectures with Keycloak using realm-per-tenant, shared realm with Organizations, tenant resolution, and data isolation.
10 min read
Authenticating AI Agents with Keycloak: OAuth 2.0 for LLM Apps
Learn how to authenticate AI agents and LLM-powered applications with Keycloak using OAuth 2.0 client credentials, scoped tokens, and MCP…
9 min read
Keycloak Token Exchange: Practical Implementation Guide
Implement Keycloak token exchange (RFC 8693) for impersonation, delegation, and cross-realm token exchange with working Node.js and Java code examples.
9 min read
Keycloak CIBA: Backchannel Authentication for Financial Services
Implement Client Initiated Backchannel Authentication (CIBA) in Keycloak for financial services with FAPI compliance, polling mode, and practical examples.
9 min read
Keycloak OAuth Device Flow for IoT and CLI Apps
Implement the OAuth 2.0 Device Authorization Grant with Keycloak for CLI tools, smart TVs, and IoT devices. Includes Python and…
10 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.