Category

Definition and Basics

Articles about definition and basics from the Skycloak team.

Definition and Basics

Cross-App Access (ID-JAG) for AI Agents, and Where Keycloak Stands

Cross-App Access (ID-JAG) lets your identity provider broker scoped API access for AI agents instead of per-app consent and refresh-token…

Guilliano Molaire Guilliano Molaire 6 min read
Definition and Basics

Keycloak MCP Server 401: Fixing the Audience Claim

MCP clients get a 401 from Keycloak-protected servers because of a wrong aud claim. Here is the RFC 8707 cause,…

Guilliano Molaire Guilliano Molaire 6 min read
Definition and Basics

What Is HIPAA Compliance? A Complete Guide for 2026

HIPAA compliance means meeting the U.S. rules that protect health data. Learn the HIPAA rules, who must comply, what PHI…

Guilliano Molaire Guilliano Molaire 9 min read
Definition and Basics

User Provisioning: How Accounts Get Created and Removed

User provisioning is how accounts get created, updated and deactivated across your apps. The four approaches, what each costs, and…

Guilliano Molaire Guilliano Molaire 7 min read
keycloak 25
Definition and Basics

Keycloak Versions: Latest Release, History, and Upgrade Guide

Keycloak's latest version is 26.7.0, released July 9, 2026. See the full version history, support policy, and how to upgrade…

Guilliano Molaire Guilliano Molaire 6 min read
Difference between an SP and an IdP and how Keycloak do both
Definition and Basics

IdP vs SP: The Difference, and How Keycloak Plays Both Roles

IdP vs SP explained: what each role does in SAML and OIDC, and how Keycloak plays both at once through…

Guilliano Molaire Guilliano Molaire 7 min read
Definition and Basics

Decoding SAMLRequest: What It Is and How to Decode It

A SAMLRequest is the Base64-encoded, deflate-compressed XML authentication request an SP sends to an IdP. Learn how to decode it…

Guilliano Molaire Guilliano Molaire 6 min read
Definition and Basics

What is Keycloak? The Complete Developer’s Guide

The complete guide to Keycloak: open source IAM for SSO, MFA, user federation, and RBAC. Architecture, features, version history, and…

Guilliano Molaire Guilliano Molaire 13 min read
Definition and Basics

What Is SCIM? The System for Cross-domain Identity Management Explained

SCIM (System for Cross-domain Identity Management) is the open standard for automated user provisioning. How it works, SCIM 2.0 endpoints,…

Guilliano Molaire Guilliano Molaire 11 min read
Definition and Basics

Understanding JWKS: JSON Web Key Sets Explained

What a JWKS (JSON Web Key Set) is, every field explained (kty, kid, use, n, e), how Keycloak publishes keys…

Guilliano Molaire Guilliano Molaire 11 min read

Stay ahead on identity & security

Get tutorials, product updates, and Keycloak tips delivered to your inbox.

© 2026 Skycloak. All Rights Reserved. Design by Yasser Soliman