Insights on Identity, Security & Keycloak
Tutorials, deep dives, and best practices from the Skycloak team.
The Vendor Risk Brief Your CTO Needs to See
A one-page identity vendor risk brief: the three risks worth five minutes of a CTO's time, the one question to…
7 min read
Secure Your App with AI: What AI AppSec Can and Cannot Replace in IAM
AI coding agents find bugs and bad configs. They do not replace token issuance, audience checks, step-up, or revocation. Here…
4 min read
CVE-2026-17526: Keycloak Impersonation Escalates to Realm Admin
CVE-2026-17526 let a Keycloak impersonation-role holder take over a realm admin. Fixed in 26.7.4 on 16 September 2026, and on…
8 min read
MFA Fatigue and Keycloak: The Real Risk Is Enrollment Abuse
Keycloak 26.x ships no push authenticator, so MFA fatigue lands differently here. The exposure that matters is authenticator enrollment, and…
8 min read
Shadow AI Agents: Okta’s Endpoint Scan vs Keycloak Inventory
Okta widened shadow AI agent discovery at Oktane 2026. Keycloak has no endpoint scanner, but it owns the chokepoint where…
9 min read
The US CLOUD Act and Your Keycloak Data: What It Actually Reaches
The CLOUD Act follows the provider, not the datacentre. What that means for Keycloak in the EU, and the questions…
12 min read
AgentCore Identity Consent Portal vs Keycloak for AI Agent OAuth
AWS now hosts the OAuth consent portal for Bedrock AgentCore agents. What it removes, what it actually couples, and where…
9 min read
CVE-2026-59822: LiteLLM’s MCP Auth Bypass, and the Second Bug in the Same Fix
CVE-2026-59822 let any fabricated Bearer token open a LiteLLM MCP session. The two separate bugs one pull request closed, and…
11 min read
ML-DSA Signature Size and the 4 KB Cookie Limit (Keycloak Prep)
ML-DSA signatures run 2,420 to 4,627 bytes against RS256's 256 bytes. The token size math, the 4 KB cookie wall…
10 min read
Skycloak Shorter Path: Managed Upstream Keycloak for Azure AD B2C Teams
Managed upstream Keycloak for teams exiting Azure AD B2C: no per-MAU billing, exportable realm config, Azure AD SSO recipe, and…
10 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.