Blog

Insights on Identity, Security & Keycloak

Tutorials, deep dives, and best practices from the Skycloak team.

keycloak 25
Definition and Basics

Keycloak Versions: Latest Release, History, and Upgrade Guide

Keycloak's latest version is 26.7.0, released July 9, 2026. See the full version history, support policy, and how to upgrade…

Guilliano Molaire Guilliano Molaire 6 min read
keycloak angular
Tutorials

Keycloak with Angular: Modern Integration Guide (vs MSAL)

Integrate Keycloak with Angular 22 using keycloak-angular v22: provideKeycloak, auto token refresh, functional interceptors, plus when MSAL fits instead.

Guilliano Molaire Guilliano Molaire 9 min read
security-best-practices

Why Password Hashing Is Vital for Security (and How to Do It Right)

Password hashing is the last line of defense when your database leaks. What RockYou, LinkedIn, and Adobe got wrong, plus…

Guilliano Molaire Guilliano Molaire 10 min read
security-best-practices

bcrypt Explained: How It Works and When to Use It in 2026

bcrypt explained: how the cost factor and salt work, the 72-byte limit, what OWASP recommends in 2026, and how to…

Guilliano Molaire Guilliano Molaire 10 min read
Definition and Basics

Decoding SAMLRequest: What It Is and How to Decode It

A SAMLRequest is the Base64-encoded, deflate-compressed XML authentication request an SP sends to an IdP. Learn how to decode it…

Guilliano Molaire Guilliano Molaire 6 min read
Tutorials

Python Authentication: Login Pages Without Storing Passwords

Build a Python login page that never stores a password: Flask and Authlib with PKCE, Keycloak as the identity provider,…

Guilliano Molaire Guilliano Molaire 8 min read
security-best-practices

Attribute-Based Access Control: How It Works, When to Use It

ABAC evaluates user, resource, action, and environment attributes at request time. See how it compares to RBAC and ReBAC, plus…

Guilliano Molaire Guilliano Molaire 9 min read
Social Login Implementation: Step-by-Step Guide
Tutorials

Social Login Implementation: Step-by-Step Guide (2026)

Step-by-step social login with OAuth authentication: Google, GitHub, and Microsoft setup, Keycloak broker config, duplicate email account linking, and mappers.

Guilliano Molaire Guilliano Molaire 9 min read
Left panel shows Keycloak logo with tag line ‘open source, your infrastructure, flat cost’ and a blue rounded card; right panel shows Okta logo with ‘managed SaaS, per-user pricing’; a dark VS circle sits between them for an IAM comparison infographic.
comparisons

Keycloak vs Okta: An Honest Workforce IAM Comparison

Keycloak vs Okta compared honestly: real July 2026 pricing, an 11-row scorecard, breach track record, and the password export problem…

Guilliano Molaire Guilliano Molaire 10 min read
SAML IDP SP in Keycloak
Tutorials

Keycloak as a SAML Service Provider: Complete Setup Guide

Configure Keycloak as a SAML service provider: broker setup, SP metadata, signature validation, attribute mapping, SLO, and fixes for common…

Guilliano Molaire Guilliano Molaire 10 min read

Stay ahead on identity & security

Get tutorials, product updates, and Keycloak tips delivered to your inbox.

© 2026 Skycloak. All Rights Reserved. Design by Yasser Soliman