Tutorials
Articles about tutorials from the Skycloak team.

Keycloak Authentication Error Handling: Custom Error Pages
Customize Keycloak error pages, handle OAuth/OIDC errors in your app, and configure brute force protection for secure, user-friendly authentication.

Keycloak with Spring Boot in Docker, Then Managed
Run Keycloak in Docker with a Spring Boot app, then move the same app to managed Keycloak without changing code.…

Monitoring Keycloak with Prometheus and Grafana
Monitor Keycloak with Prometheus and Grafana: enable metrics, track authentication KPIs, build dashboards, and define SLOs for your identity stack.
Single Sign-On for HashiCorp Vault with Keycloak (OIDC)
Set up OIDC single sign-on for HashiCorp Vault with Keycloak: configure the auth method, map groups to Vault policies, and…

Keycloak MFA: Configuration Patterns for Enterprise
How to set up Keycloak MFA: OTP policies, WebAuthn, conditional flows that apply MFA selectively, client-specific overrides, and detecting MFA…
Keycloak Admin REST API: Manage Realms, Clients, and Users with curl
Use the Keycloak Admin REST API to create realms, clients, roles, groups, and users with curl. Every request tested against…
SCIM API: Building and Testing a SCIM 2.0 Endpoint
What a SCIM API has to implement to satisfy Okta and Entra ID: endpoints, PATCH semantics, filtering, pagination, error shapes,…
Add Authentication to a Python App on Fly.io with Keycloak
Add OIDC login to a Python app on Fly.io with Keycloak: Flask + Authlib walkthrough, fly secrets, the ProxyFix redirect-URI…
Let Product Teams Onboard Apps Without Handing Out Keycloak Admin
Product teams need Keycloak clients. Your IAM team shouldn't hand out admin. Compare the two patterns that work: a self-service…
Keycloak Is Not Your Identity Store: Shadow Accounts and the Broker Pattern
Keycloak rarely owns your users. It keeps shadow accounts, authenticates, and issues a JWT. Where identity, authentication, and authorization really…
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.