Tutorials
Keycloak Tutorials on different problems developers face on their day to day as DevOps, UI or infrastructure engineers. Regardless of your experience!
How to Run the Keycloak Admin Console on a Separate Hostname Behind nginx (KC_HOSTNAME_ADMIN)
KC_HOSTNAME_ADMIN does work behind nginx. Serve the Keycloak admin console on a separate hostname with the proxy headers and server…
10 min read
Token and Claims Modeling in Keycloak: Reproducing Legacy IdP Behavior
Reproduce legacy IdP tokens in Keycloak so apps survive cutover. Build a claim contract, map UAA/SiteMinder/Okta claims, and diff old…
16 min read
Dual-Run IAM Migration: Switching Identity Providers Without Downtime
An IAM migration strategy for large estates: run old and new IdPs at once, cut apps over in waves, and…
14 min read
Keycloak and SiteMinder Federation: SAML and OIDC Integration Guide
Keycloak SiteMinder integration without a rip-and-replace: run both side by side, federate over SAML or OIDC, and migrate apps at…
15 min read
Configuring MFA in Keycloak: Enterprise Patterns
A practical guide to configuring MFA in Keycloak, covering OTP policies, WebAuthn, conditional flows, client-specific overrides, and token-based MFA detection.
13 min read
Authentication Error Handling in Keycloak: Customizing Error Pages and User Experience
Learn how to customize Keycloak error pages, handle OAuth/OIDC errors in your app, and configure brute force protection for secure,…
11 min read
Keycloak Passkeys & WebAuthn: The Complete Guide
Set up passkeys and WebAuthn in Keycloak for passwordless login and two-factor auth: required actions, authentication flows, policies, and browser…
13 min read
Keycloak as a SAML Service Provider: The Complete Guide
Configure Keycloak as a SAML 2.0 Service Provider: identity brokering, metadata exchange, assertion validation, attribute mapping, and common SP errors.
14 min read
How to Configure Microsoft Entra ID as a SAML Identity Provider in Keycloak
Step-by-step guide to configuring Microsoft Entra ID as a SAML identity provider in Keycloak, with attribute mappers, metadata import, and…
13 min read
8 Default Configurations to Adjust Right Away on Your Keycloak Cluster
Optimize your Keycloak cluster by adjusting these 8 critical default configurations for database, HTTPS, email, sessions, grants, admin security, and…
14 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.