Tutorials
Keycloak Tutorials on different problems developers face on their day to day as DevOps, UI or infrastructure engineers. Regardless of your experience!
Keycloak Is Not Your Identity Store: Shadow Accounts and the Broker Pattern
Keycloak rarely owns your users. It keeps shadow accounts, authenticates, and issues a JWT. Where identity, authentication, and authorization really…
11 min read
Federate or Migrate? Your Legacy User Store Is Now in the Login Path
Federating a legacy user store into Keycloak avoids a big-bang migration, but it puts someone else's database in your login…
10 min read
Keycloak with Angular: Modern Integration Guide (vs MSAL)
Integrate Keycloak with Angular 22 using keycloak-angular v22: provideKeycloak, auto token refresh, functional interceptors, plus when MSAL fits instead.
9 min read
Python Authentication: Login Pages Without Storing Passwords
Build a Python login page that never stores a password: Flask and Authlib with PKCE, Keycloak as the identity provider,…
8 min read
Social Login Implementation: Step-by-Step Guide (2026)
Step-by-step social login with OAuth authentication: Google, GitHub, and Microsoft setup, Keycloak broker config, duplicate email account linking, and mappers.
9 min read
Keycloak as a SAML Service Provider: Complete Setup Guide
Configure Keycloak as a SAML service provider: broker setup, SP metadata, signature validation, attribute mapping, SLO, and fixes for common…
10 min read
How to Enable User Registration in Keycloak (26.x Guide)
Enable self-registration in Keycloak 26.x: the Login tab toggle, the new email-first password flow, custom fields via user profile, and…
9 min read
Automating Keycloak at Scale: Admin API Pagination and Bulk Operations
Use the Keycloak Admin REST API at scale: correct first/max pagination, getting total counts, bulk user import/export, and avoiding the…
11 min read
Adding a ‘Delete My Account’ Button in Keycloak
Enable self-service account deletion in Keycloak: turn on the delete_account required action, grant the delete-account role, and handle GDPR erasure…
11 min read
How to Verify a Keycloak Access Token on the Backend
Verify Keycloak access tokens on your backend: local JWT signature checks with JWKS, token introspection, claim validation, and Java, Node,…
12 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.