auth-patterns
Articles about auth-patterns from the Skycloak team.
Enterprise Passkeys for B2B SaaS: vs Magic Links and Passwords
Enterprise passkeys usually mean synced passkeys or hardware keys. How they compare with magic links and passwords in B2B SaaS,…
10 min readWhat Is an MCP Gateway, and What Does It Not Do for OAuth?
An MCP gateway proxies agent traffic to MCP servers and applies policy, but it does not replace token validation at…
7 min readHome Realm Discovery on Keycloak: Email Domain Routing
Home realm discovery sends user@customer.com to the right corporate IdP without a picker. How Keycloak 26.8 Organizations does it, and…
8 min readJIT Provisioning vs SCIM: When Is First Login Enough?
Just-in-time provisioning creates a user at first login, but never removes one. Compare JIT and SCIM, and decide which your…
7 min readIdP-Initiated vs SP-Initiated SSO: Which Flow to Use
SP-initiated SSO starts in your app; IdP-initiated SSO starts in the customer's portal. Learn the security tradeoffs and what to…
6 min readKeycloak 26.8 OpenID4VP Verifier for EUDI Relying Parties
Keycloak 26.8.0 adds an experimental OpenID4VP verifier as an identity provider. What it supports, what it lacks, and a checklist…
14 min readKeycloak 26.8 Token Exchange Delegation for AI Agents
Keycloak 26.8 moves token exchange delegation to preview: users consent, FGAP V2 gates the agent, and the delegated token carries…
15 min readMCP Authorization Decision Tree: When to Use Keycloak
MCP authorization is optional and stdio servers should skip OAuth. A decision tree for when to use API keys, OAuth,…
8 min readWorkload Identity Federation to Keycloak: SPIFFE JWT-SVID as Client Auth
An IETF draft lets workloads authenticate to an OAuth server with SPIFFE JWT-SVIDs, not client secrets. What it specifies and…
8 min readAgentic Commerce Authentication: Tokens vs Payment Mandates
AI shopping agents need two separate proofs: a token saying who acts for whom, and a signed mandate saying what…
9 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.