Definition and Basics

Articles about definition and basics from the Skycloak team.

SCIM (System for Cross-domain Identity Management) is the open standard for automated user provisioning. How it works, SCIM 2.0 endpoints,…

What a JWKS (JSON Web Key Set) is, every field explained (kty, kid, use, n, e), how Keycloak publishes keys…

Is Keycloak overkill for a startup? An honest look at flat pricing vs per-MAU fees, the real ops burden, and…

Is Keycloak right for your B2B SaaS? An honest decision guide on multi-tenancy, enterprise SSO, SCIM, flat pricing, and the…

Keycloak token introspection vs local JWT validation: how each works, the latency and revocation trade-offs, and which to use for…

What Keycloak offline tokens are, how the offline_access scope works, how they differ from regular refresh tokens, and when to…

Keycloak client scopes vs roles explained: what each does, how they shape token claims and scopes, and when to use…

How third-party cookie deprecation breaks Keycloak's silent SSO and session checks in keycloak.js, what FedCM is, and how to keep…

Is self-hosting Keycloak worth it? An honest look at the real operational burden, when self-hosting wins, and when managed Keycloak…

Compare SAML and OIDC protocols for SSO. Learn when to use each, how they work in Keycloak, and how to…

Stay ahead on identity & security

Get tutorials, product updates, and Keycloak tips delivered to your inbox.