security-best-practices
Articles about security-best-practices from the Skycloak team.
What Is a Service Principal? How Vendor Apps Get App-Only Access
A service principal is an app's identity inside one tenant. See how vendor apps get app-only access, how to audit…
11 min readOAuth Grant Sprawl and OAuth Token Management for Admins
OAuth grant sprawl is long-lived third-party app consent that outlives the employee and the need. How OAuth token management finds,…
9 min readSCIM Authentication: How to Harden Provisioning Endpoints
SCIM authentication usually rests on one bearer token with write access to your users and groups. Here is how to…
10 min readWhat Is Conditional Access? Context-Based Login Policies Explained
Conditional access is an if/then policy checked at sign-in: signals in, decision out. How it differs from MFA, starter policies,…
9 min readWhat Is Phishing-Resistant MFA? Methods That Qualify
Phishing-resistant MFA binds the credential to the real site, so a fake page has nothing to collect. Which methods qualify,…
7 min readEntra ID Will Block Login Script Injection: Harden Keycloak CSP
Microsoft Entra ID will enforce a strict CSP on sign-in pages in mid-October 2026. How Keycloak sets CSP per realm,…
12 min readEntra SSPR Registered Methods and Keycloak Account Recovery
Entra SSPR will stop accepting unregistered directory phones and emails for password reset. What changes, and how to apply the…
10 min readTrustSink: Rogue External MFA and Phishing-Resistant Login
TrustSink turns a rogue Entra external MFA provider into a password trap after an admin compromise. What it needs, why…
10 min readNIST IR 8587 Token Protection: A Keycloak Control Map
NIST finalized IR 8587 on 15 September 2026. Here is what it asks of identity providers, mapped to the Keycloak…
14 min readCloud Identity Management: How to Choose a Cloud IAM Solution
Cloud identity management moves authentication, authorization, and user lifecycle to a hosted service. How cloud IAM solutions differ, and how…
8 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.