Insights on Identity, Security & Keycloak
Tutorials, deep dives, and best practices from the Skycloak team.
WorkOS Alternatives: Open-Source and Self-Hosted
The best WorkOS alternatives for B2B SSO, SCIM, and multi-tenancy. Open-source and self-hosted options like Keycloak, Authentik, Ory, and more…
12 min read
Fixing CORS Errors with Keycloak
Fix Keycloak CORS errors: configure Web Origins on the client, understand preflight requests, and resolve 'blocked by CORS policy' issues…
10 min read
Zitadel Alternatives for Developers
Compare Zitadel alternatives for developers: Keycloak, Authentik, Ory, FusionAuth, SuperTokens, Auth0, and WorkOS, by license, deployment, and protocols.
13 min read
Token Introspection vs Local JWT Validation in Keycloak
Keycloak token introspection vs local JWT validation: how each works, the latency and revocation trade-offs, and which to use for…
10 min read
Keycloak vs Authelia: Self-Hosted Auth Comparison
Keycloak vs Authelia compared across architecture, protocols, MFA, federation, and footprint. A fair, honest guide to picking the right self-hosted…
11 min read
Keycloak Offline Tokens Explained
What Keycloak offline tokens are, how the offline_access scope works, how they differ from regular refresh tokens, and when to…
11 min read
Keycloak Admin Console on a Separate Hostname with nginx
KC_HOSTNAME_ADMIN does work behind nginx. Serve the Keycloak admin console on a separate hostname with the right proxy headers and…
10 min read
Token and Claims Modeling in Keycloak: Reproducing Legacy IdP Behavior
Reproduce legacy IdP tokens in Keycloak so apps survive cutover. Build a claim contract, map UAA/SiteMinder/Okta claims, and diff old…
16 min read
Dual-Run IAM Migration: Switching Identity Providers Without Downtime
An IAM migration strategy for large estates: run old and new IdPs at once, cut apps over in waves, and…
14 min read
Keycloak and SiteMinder Federation: SAML and OIDC Integration Guide
Keycloak SiteMinder integration without a rip-and-replace: run both side by side, federate over SAML or OIDC, and migrate apps at…
15 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.