Tutorials
Articles about tutorials from the Skycloak team.

How to change the username label on the Keycloak login page
To change the username label on the Keycloak login page, add a realm override for usernameOrEmail, username or email in…
Keycloak as an Identity Provider for Cloudflare Access
Use Keycloak as an OIDC identity provider for Cloudflare Access (Zero Trust): configure the integration, pass groups for policies, and…
Securing Hasura GraphQL with Keycloak JWT Claims
Secure Hasura GraphQL with Keycloak: configure JWT mode, add the x-hasura-* custom claims via a protocol mapper, and map Keycloak…
Put Keycloak in Front of Internal Apps with oauth2-proxy and Nginx
Protect an internal app with no login of its own: Keycloak 26 as the OIDC provider, oauth2-proxy as its client,…

Identity Governance Workflows in Keycloak: Access Requests
Build automated access request and approval workflows with Keycloak using custom required actions, the Admin REST API, and group-based access…
Keycloak SSO for Backstage: The Developer-Portal Auth Guide
Add Keycloak single sign-on to Backstage with the OIDC auth provider: configure it, resolve users to catalog identities, and protect…
Keycloak as an AuthZEN Policy Decision Point
Keycloak 26.7 added experimental AuthZEN support, so apps can ask Keycloak for permit or deny decisions over a standard API.…
Add Skycloak to Cursor with MCP: Operate Managed Keycloak from Your IDE
Connect Cursor to the Skycloak MCP server at mcp.skycloak.io, sign in with browser OAuth, and manage Keycloak clusters, realms, apps…
Skycloak Shorter Path: Managed Upstream Keycloak for Azure AD B2C Teams
Managed upstream Keycloak for teams exiting Azure AD B2C: no per-MAU billing, exportable realm config, Azure AD SSO recipe, and…
Enterprise SSO That Survives IdP Changes
How to architect enterprise SSO so switching identity providers does not break your applications, with Keycloak identity hub patterns and…
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.