Definition and Basics

Articles about definition and basics from the Skycloak team.

IdP vs SP explained: what each role does in SAML and OIDC, and how Keycloak plays both at once through…

Keycloak's latest version is 26.7.0, released July 9, 2026. See the full version history, support policy, and how to upgrade…

The complete guide to Keycloak: open source IAM for SSO, MFA, user federation, and RBAC. Architecture, features, version history, and…

SCIM provisioning explained: how an identity provider creates, updates and deactivates accounts over SCIM 2.0, with the real requests and…

Learn what JWKS means, how to verify JWT signatures safely, and how to rotate Keycloak signing keys with overlap while…

Is Keycloak overkill for a startup? An honest look at flat pricing vs per-MAU fees, the real ops burden, and…

Is Keycloak right for your B2B SaaS? An honest decision guide on multi-tenancy, enterprise SSO, SCIM, flat pricing, and the…

Keycloak token introspection vs local JWT validation: how each works, the latency and revocation trade-offs, and which to use for…

What Keycloak offline tokens are, how the offline_access scope works, how they differ from regular refresh tokens, and when to…

A Keycloak client scope bundles mappers and role limits that decide what lands in a client's tokens. Default vs optional,…

Stay ahead on identity & security

Get tutorials, product updates, and Keycloak tips delivered to your inbox.