Tutorials
Keycloak Tutorials on different problems developers face on their day to day as DevOps, UI or infrastructure engineers. Regardless of your experience!
Federate or Migrate? Your Legacy User Store Is Now in the Login Path
Federating a legacy user store into Keycloak avoids a big-bang migration, but it puts someone else's database in your login…
10 min read
Keycloak with Angular: Modern Integration Guide (vs MSAL)
Integrate Keycloak with Angular 22 using keycloak-angular v22: provideKeycloak, auto token refresh, functional interceptors, plus when MSAL fits instead.
9 min read
Python Authentication: Login Pages Without Storing Passwords
Build a Python login page that never stores a password: Flask and Authlib with PKCE, Keycloak as the identity provider,…
8 min read
Social Login Implementation: Step-by-Step Guide (2026)
Step-by-step social login with OAuth authentication: Google, GitHub, and Microsoft setup, Keycloak broker config, duplicate email account linking, and mappers.
9 min read
Keycloak as a SAML Service Provider: Complete Setup Guide
Configure Keycloak as a SAML service provider: broker setup, SP metadata, signature validation, attribute mapping, SLO, and fixes for common…
10 min read
How to Enable User Registration in Keycloak (26.x Guide)
Enable self-registration in Keycloak 26.x: the Login tab toggle, the new email-first password flow, custom fields via user profile, and…
9 min read
Automating Keycloak at Scale: Admin API Pagination and Bulk Operations
Use the Keycloak Admin REST API at scale: correct first/max pagination, getting total counts, bulk user import/export, and avoiding the…
11 min read
Adding a ‘Delete My Account’ Button in Keycloak
Enable self-service account deletion in Keycloak: turn on the delete_account required action, grant the delete-account role, and handle GDPR erasure…
11 min read
How to Verify a Keycloak Access Token on the Backend
Verify Keycloak access tokens on your backend: local JWT signature checks with JWKS, token introspection, claim validation, and Java, Node,…
12 min read
Keycloak Admin Console on a Separate Hostname with nginx
KC_HOSTNAME_ADMIN does work behind nginx. Serve the Keycloak admin console on a separate hostname with the right proxy headers and…
10 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.