Insights on Identity, Security & Keycloak
Tutorials, deep dives, and best practices from the Skycloak team.
SPIFFE/SPIRE Workload Identity: What a Compromised Node Actually Breaks
Unit 42 showed a root-compromised Kubernetes node can spoof SPIFFE/SPIRE workload identities via cgroup tricks. Here is what actually breaks,…
11 min read
Keycloak Authentication Error Handling: Custom Error Pages
Customize Keycloak error pages, handle OAuth/OIDC errors in your app, and configure brute force protection for secure, user-friendly authentication.
11 min read
How Many Nines Does Your Keycloak SLA Actually Need?
Four nines vs five nines for authentication: what each SLA tier really costs, which Keycloak architecture delivers it, and when…
5 min read
Migrating From Azure AD B2C to Keycloak
Migrate from Azure AD B2C to Keycloak: export users and custom policies, recreate user flows as authentication flows, handle password…
11 min read
Keycloak MCP Server 401: Fixing the Audience Claim
MCP clients get a 401 from Keycloak-protected servers because of a wrong aud claim. Here is the RFC 8707 cause,…
6 min read
Keycloak with Spring Boot in Docker, Then Managed
Run Keycloak in Docker with a Spring Boot app, then move the same app to managed Keycloak without changing code.…
9 min read
Loi 25 et PIPEDA : ce que la conformité exige de votre système d’identité
Ce que la Loi 25 et la LPRPDE exigent de votre gestion des identités, où vos données doivent résider, et…
9 min read
Keycloak, Quebec Law 25 and PIPEDA: A Practical Compliance Guide
What Quebec's Law 25 and PIPEDA require from your identity system, which Keycloak settings satisfy them, and the data residency…
9 min read
Cross-App Access (ID-JAG) for AI Agents, and Where Keycloak Stands
Cross-App Access (ID-JAG) lets your identity provider broker scoped API access for AI agents instead of per-app consent and refresh-token…
6 min read
Monitoring Keycloak with Prometheus and Grafana
Monitor Keycloak with Prometheus and Grafana: enable metrics, track authentication KPIs, build dashboards, and define SLOs for your identity stack.
9 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.