Definition and Basics
Articles about definition and basics from the Skycloak team.
What Is ReBAC? Relationship-Based Access Control vs RBAC
ReBAC grants access from relationships like 'owner of' or 'member of'. How it differs from RBAC and ABAC, when it…
10 min read
OAuth Scopes Explained: Standard Scopes, Design, and Scopes vs Claims
An OAuth scope is a named permission a client requests and a token carries. The standard OIDC scopes, scopes vs…
9 min read
ID Token vs Access Token: Differences and How to Validate
An ID token tells your app who signed in; an access token tells an API what the caller may do.…
7 min read
What Is Identity Brokering? One Login Box for Social and Enterprise IdPs
Identity brokering lets one identity provider sign users in through Google, Okta or Entra and issue its own token. Learn…
7 min read
The Joiner-Mover-Leaver (JML) Process for SaaS Teams
The joiner-mover-leaver (JML) process explained: what each stage means, why movers and leavers cause audit findings, and how SaaS teams…
7 min read
IAM vs IGA: What Identity Governance and Administration Adds for Growing SaaS Teams
IAM decides who can sign in; IGA shows who should have access, who approved it and that it was removed.…
11 min read
What Is an Identity Provider? IdP Basics for SaaS and SSO
An identity provider (IdP) signs users in and vouches for them to other apps. Learn how IdPs work, how they…
6 min read
What Is IDaaS? Identity as a Service Explained
IDaaS (identity as a service) means a vendor runs your login, MFA, SSO and tokens in the cloud. See what…
6 min read
Non-Human Identity (NHI) for AI Agents on Keycloak
A non-human identity is an identity used by software, not a person. How AI agents fit, why one shared bot…
10 min read
Issuing Verifiable Credentials With Keycloak (OID4VCI)
How to issue Verifiable Credentials from Keycloak with OID4VCI: what the standard is, Keycloak's experimental support, and how it fits…
12 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.