auth-patterns
Articles about auth-patterns from the Skycloak team.
EUDI Wallet Relying Party with Keycloak: Where OpenID4VP Support Actually Stands
Keycloak's OID4VP wallet verifier is merged upstream behind an experimental flag but ships in no release as of 26.7.3. Here…
9 min readKeycloak + OPA: Fine-Grained Authorization Beyond RBAC
Integrate Open Policy Agent with Keycloak for fine-grained authorization. Learn ABAC, ReBAC patterns, Rego policies, sidecar deployment, and decision logging.
7 min readOAuth for Mobile Apps: Best Practices with Keycloak
Learn mobile OAuth best practices with Keycloak including PKCE, secure token storage, refresh rotation, and biometric binding for iOS and…
11 min read
Zero Trust Authentication with Keycloak
Implement zero trust authentication with Keycloak using continuous verification, context-aware policies, step-up MFA, and real-time session risk scoring.
9 min readMulti-Tenant Auth Architecture: A Developer's Guide
Design multi-tenant authentication architectures with Keycloak using realm-per-tenant, shared realm with Organizations, tenant resolution, and data isolation.
9 min read
Authenticating AI Agents with Keycloak: OAuth 2.0 for LLM Apps
Learn how to authenticate AI agents and LLM-powered applications with Keycloak using OAuth 2.0 client credentials, scoped tokens, and MCP…
9 min readKeycloak Token Exchange: Practical Implementation Guide
Implement Keycloak standard token exchange (RFC 8693) in 26.x: enable it per client, set up audiences, and call it from…
10 min readKeycloak CIBA: Backchannel Authentication for Financial Services
Implement Client Initiated Backchannel Authentication (CIBA) in Keycloak for financial services with FAPI compliance, polling mode, and practical examples.
9 min readKeycloak OAuth Device Flow for IoT and CLI Apps
Implement the OAuth 2.0 Device Authorization Grant with Keycloak for CLI tools, smart TVs, and IoT devices. Includes Python and…
8 min readStep-Up Authentication with Keycloak: A Practical Guide
Implement step-up authentication with Keycloak using ACR values and conditional OTP to require stronger MFA for sensitive operations like payment…
7 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.