Insights on Identity, Security & Keycloak
Tutorials, deep dives, and best practices from the Skycloak team.
IdP vs SP: The Difference, and How Keycloak Plays Both Roles
IdP vs SP explained: what each role does in SAML and OIDC, and how Keycloak plays both at once through…
7 min read
How to Enable User Registration in Keycloak (26.x Guide)
Enable self-registration in Keycloak 26.x: the Login tab toggle, the new email-first password flow, custom fields via user profile, and…
9 min read
JWT Token Lifecycle: Expiration, Refresh, and Revocation
JWT lifecycle guide: expiration, refresh token rotation per RFC 9700, Keycloak revocation, and Spring Boot resource server validation with zero…
11 min read
Session Management: Cookies vs Tokens vs Server-Side
Cookies vs tokens vs server-side sessions for distributed systems: security trade-offs, 2026 cookie changes, and how Keycloak persists sessions by…
11 min read
Open Source Authentication in 2026: Complete Comparison
Keycloak, authentik, Zitadel, Ory, Authelia, Casdoor, SuperTokens, and FusionAuth compared: licenses, protocols, and deployment weight, verified July 2026.
11 min read
What is Keycloak? The Complete Developer’s Guide
The complete guide to Keycloak: open source IAM for SSO, MFA, user federation, and RBAC. Architecture, features, version history, and…
13 min read
Keycloak vs authentik: The Honest 2026 Comparison
Keycloak vs authentik in July 2026: an honest scorecard with version-stamped facts, where authentik genuinely wins, where Keycloak does, and…
11 min read
Migrating Keycloak From WildFly to Quarkus: A Cutover Guide
Migrate from the legacy WildFly Keycloak distribution to Quarkus: config conversion, the removed /auth path, custom provider changes, and a…
10 min read
Keycloak vs Auth0: The Definitive Comparison for Developers
Keycloak vs Auth0 in 2026: honest feature tables, real pricing at 1,000, 10,000, and 100,000 MAUs, and a migration path.…
13 min read
Secure User Impersonation in Keycloak for Support Teams
Let support staff log in as a user in Keycloak without giving them admin: scope the impersonation role, audit every…
10 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.