Tutorials
Keycloak Tutorials on different problems developers face on their day to day as DevOps, UI or infrastructure engineers. Regardless of your experience!
Keycloak Authentication Error Handling: Custom Error Pages
Customize Keycloak error pages, handle OAuth/OIDC errors in your app, and configure brute force protection for secure, user-friendly authentication.
11 min read
Keycloak with Spring Boot in Docker, Then Managed
Run Keycloak in Docker with a Spring Boot app, then move the same app to managed Keycloak without changing code.…
9 min read
Monitoring Keycloak with Prometheus and Grafana
Monitor Keycloak with Prometheus and Grafana: enable metrics, track authentication KPIs, build dashboards, and define SLOs for your identity stack.
9 min read
Single Sign-On for HashiCorp Vault with Keycloak (OIDC)
Set up OIDC single sign-on for HashiCorp Vault with Keycloak: configure the auth method, map groups to Vault policies, and…
13 min read
Keycloak MFA: Configuration Patterns for Enterprise
How to set up Keycloak MFA: OTP policies, WebAuthn, conditional flows that apply MFA selectively, client-specific overrides, and detecting MFA…
21 min read
Keycloak Admin REST API: Manage Realms, Clients, and Users with curl
Use the Keycloak Admin REST API to create realms, clients, roles, groups, and users with curl. Every request tested against…
11 min read
SCIM API: Building and Testing a SCIM 2.0 Endpoint
What a SCIM API has to implement to satisfy Okta and Entra ID: endpoints, PATCH semantics, filtering, pagination, error shapes,…
7 min read
Add Authentication to a Python App on Fly.io with Keycloak
Add OIDC login to a Python app on Fly.io with Keycloak: Flask + Authlib walkthrough, fly secrets, the ProxyFix redirect-URI…
10 min read
Let Product Teams Onboard Apps Without Handing Out Keycloak Admin
Product teams need Keycloak clients. Your IAM team shouldn't hand out admin. Compare the two patterns that work: a self-service…
9 min read
Keycloak Is Not Your Identity Store: Shadow Accounts and the Broker Pattern
Keycloak rarely owns your users. It keeps shadow accounts, authenticates, and issues a JWT. Where identity, authentication, and authorization really…
11 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.