Insights on Identity, Security & Keycloak
Tutorials, deep dives, and best practices from the Skycloak team.
Skycloak Identity Providers Recipe: Add OIDC or SAML IdP in 5 Minutes
Canonical step-by-step recipe for adding any OIDC or SAML identity provider to Skycloak, with Google, Entra ID, and Okta examples…
10 min read
Device Code Phishing and Passkey Lures: Harden Keycloak Against AiTM
Microsoft's September 2026 report shows passkey-themed lures driving AiTM and device-code attacks. Here is the Keycloak realm hardening that answers…
12 min read
Keycloak Admin API v2: Declarative OIDC and SAML Clients with the Operator
Keycloak 26.7 shipped an experimental Admin API v2 and Operator CRs for clients. Here is what KeycloakOIDCClient actually does, and…
12 min read
NIST IR 8587 Token Protection: A Keycloak Control Map
NIST finalized IR 8587 on 15 September 2026. Here is what it asks of identity providers, mapped to the Keycloak…
14 min read
Agentic Commerce Authentication: Tokens vs Payment Mandates
AI shopping agents need two separate proofs: a token saying who acts for whom, and a signed mandate saying what…
9 min read
Okta Managed MCP Server vs Keycloak for Conversational IAM
Okta's hosted MCP server lets you administer your org in natural language. Here is what it does, and how the…
9 min read
Entra Is Retiring SMS MFA: A Keycloak Passkey Migration Plan
Microsoft retires its own SMS and voice MFA delivery on 1 February 2027. Here is what that actually changes, and…
11 min read
Auth0 B2B Connect and Tenancy-as-a-Service vs Keycloak Organizations for Multi-Tenant SaaS
Auth0 packaged B2B tenancy across 2026. Keycloak 26.7 answered the same delegated-admin problem with organization-scoped admin permissions. How they compare.
9 min read
EUDI Wallet Relying Party with Keycloak: Where OpenID4VP Support Actually Stands
Keycloak's OID4VP wallet verifier is merged upstream behind an experimental flag but ships in no release as of 26.7.3. Here…
9 min read
Keycloak CIMD for MCP: Client ID Metadata Documents for Claude Code and VS Code
Keycloak has shipped experimental CIMD support since 26.6 behind the cimd flag. Here is the client policy that lets Claude…
11 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.