Category

Definition and Basics

Articles about definition and basics from the Skycloak team.

Definition and Basics

Why Keycloak Breaks MCP Servers (the Audience Claim) and How RFC 8707 Fixes It

MCP clients get a 401 from Keycloak-protected servers because of a wrong aud claim. Here is the RFC 8707 cause,…

Guilliano Molaire Guilliano Molaire 6 min read
Definition and Basics

Cross-App Access (ID-JAG) for AI Agents, and Where Keycloak Stands

Cross-App Access (ID-JAG) lets your identity provider broker scoped API access for AI agents instead of per-app consent and refresh-token…

Guilliano Molaire Guilliano Molaire 6 min read
keycloak 25
Definition and Basics

Keycloak Versions: Latest Release, History, and Upgrade Guide

Keycloak's latest version is 26.7.0, released July 9, 2026. See the full version history, support policy, and how to upgrade…

Guilliano Molaire Guilliano Molaire 6 min read
Definition and Basics

What is Keycloak? The Complete Developer’s Guide

The complete guide to Keycloak: open-source IAM for SSO, MFA, user federation, and RBAC. Architecture, features, version history, and when…

Guilliano Molaire Guilliano Molaire 13 min read
Difference between an SP and an IdP and how Keycloak do both
Definition and Basics

IdP vs SP: The Difference, and How Keycloak Plays Both Roles

IdP vs SP explained: what each role does in SAML and OIDC, and how Keycloak plays both at once through…

Guilliano Molaire Guilliano Molaire 7 min read
Definition and Basics

Decoding SAMLRequest: What It Is and How to Decode It

A SAMLRequest is the Base64-encoded, deflate-compressed XML authentication request an SP sends to an IdP. Learn how to decode it…

Guilliano Molaire Guilliano Molaire 6 min read
Definition and Basics

What Is SCIM? The System for Cross-domain Identity Management Explained

SCIM (System for Cross-domain Identity Management) is the open standard for automated user provisioning. How it works, SCIM 2.0 endpoints,…

Guilliano Molaire Guilliano Molaire 11 min read
Definition and Basics

Understanding JWKS: JSON Web Key Sets Explained

What a JWKS (JSON Web Key Set) is, every field explained (kty, kid, use, n, e), how Keycloak publishes keys…

Guilliano Molaire Guilliano Molaire 10 min read
Definition and Basics

Is Keycloak Overkill for a Startup?

Is Keycloak overkill for a startup? An honest look at flat pricing vs per-MAU fees, the real ops burden, and…

Guilliano Molaire Guilliano Molaire 10 min read
Definition and Basics

Is Keycloak Right for Your B2B SaaS? A Decision Guide

Is Keycloak right for your B2B SaaS? An honest decision guide on multi-tenancy, enterprise SSO, SCIM, flat pricing, and the…

Guilliano Molaire Guilliano Molaire 11 min read

Stay ahead on identity & security

Get tutorials, product updates, and Keycloak tips delivered to your inbox.

© 2026 Skycloak. All Rights Reserved. Design by Yasser Soliman