Definition and Basics
Articles about definition and basics from the Skycloak team.
Third-Party Cookies, FedCM, and What Breaks in Keycloak.js
How third-party cookie deprecation breaks Keycloak's silent SSO and session checks in keycloak.js, what FedCM is, and how to keep…
13 min readIs Self-Hosting Keycloak Worth It in 2026? An Honest Reality Check
Is self-hosting Keycloak worth it? An honest look at the real operational burden, when self-hosting wins, and when managed Keycloak…
10 min readSAML vs OIDC: When to Use Each Protocol
Compare SAML and OIDC protocols for SSO. Learn when to use each, how they work in Keycloak, and how to…
10 min readAPI Authentication Best Practices in 2026
Comprehensive guide to API authentication in 2026 covering OAuth 2.0 with PKCE, mTLS, DPoP, JWT validation, token introspection, and choosing…
7 min readJWT Best Practices: Security, Storage, and Rotation
A comprehensive guide to JWT security best practices covering token storage, key rotation, claim validation, refresh token rotation, and Keycloak…
11 min read
OpenID Connect Explained: A Developer's Guide with Keycloak
A developer's deep dive into OpenID Connect (OIDC) covering ID tokens, claims, scopes, discovery endpoints, and UserInfo with practical Keycloak…
11 min readAPI Keys vs OAuth: When to Use Each with Keycloak
Decision guide comparing API keys and OAuth tokens for API security. Learn when to use each approach, hybrid patterns, and…
9 min read
SSO Implementation Guide: SAML and OIDC with Keycloak
Comprehensive SSO implementation guide for developers covering SAML vs OIDC protocols, SP and IdP-initiated flows, single logout, and Keycloak configuration.
11 min read
How OAuth 2.0 Works: A Developer's Visual Guide
Visual developer guide to OAuth 2.0 grant types including authorization code with PKCE, client credentials, and device flow with Keycloak…
11 min read
IoT Identity Management: Securing Connected Devices with Keycloak
Implement IoT identity management with Keycloak: OAuth 2.0 Device Authorization Grant, machine-to-machine authentication, and Zero Trust for connected devices.
9 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.