auth-patterns
Articles about auth-patterns from the Skycloak team.
What Is an MCP Gateway, and What Does It Not Do for OAuth?
An MCP gateway proxies agent traffic to MCP servers and applies policy, but it does not replace token validation at…
7 min read
JIT Provisioning vs SCIM: When Is First Login Enough?
Just-in-time provisioning creates a user at first login, but never removes one. Compare JIT and SCIM, and decide which your…
7 min read
Home Realm Discovery on Keycloak: Email Domain Routing
Home realm discovery sends [email protected] to the right corporate IdP without a picker. How Keycloak 26.8 Organizations does it, and…
8 min read
IdP-Initiated vs SP-Initiated SSO: Which Flow to Use
SP-initiated SSO starts in your app; IdP-initiated SSO starts in the customer's portal. Learn the security tradeoffs and what to…
6 min read
Keycloak 26.8 Token Exchange Delegation for AI Agents
Keycloak 26.8 moves token exchange delegation to preview: users consent, FGAP V2 gates the agent, and the delegated token carries…
15 min read
Keycloak 26.8 OpenID4VP Verifier for EUDI Relying Parties
Keycloak 26.8.0 adds an experimental OpenID4VP verifier as an identity provider. What it supports, what it lacks, and a checklist…
14 min read
MCP Authorization Decision Tree: When to Use Keycloak
MCP authorization is optional and stdio servers should skip OAuth. A decision tree for when to use API keys, OAuth,…
9 min read
Workload Identity Federation to Keycloak: SPIFFE JWT-SVID as Client Auth
An IETF draft lets workloads authenticate to an OAuth server with SPIFFE JWT-SVIDs, not client secrets. What it specifies and…
8 min read
Agentic Commerce Authentication: Tokens vs Payment Mandates
AI shopping agents need two separate proofs: a token saying who acts for whom, and a signed mandate saying what…
9 min read
EUDI Wallet Relying Party with Keycloak: Where OpenID4VP Support Actually Stands
Keycloak's OID4VP wallet verifier is merged upstream behind an experimental flag but ships in no release as of 26.7.3. Here…
9 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.