Insights on Identity, Security & Keycloak
Tutorials, deep dives, and best practices from the Skycloak team.
Keycloak Refresh Token Rotation: Setup and Best Practices
How to configure refresh token rotation in Keycloak: revoke-on-use, reuse detection, token lifetimes, SPA vs confidential clients, and security best…
11 min read
Keycloak Client Scopes Explained: What They Are vs Roles
A Keycloak client scope bundles mappers and role limits that decide what lands in a client's tokens. Default vs optional,…
21 min read
Keycloak UMA 2.0: User-Managed Resource Sharing
A practical guide to User-Managed Access (UMA 2.0) in Keycloak: the permission ticket flow, RPT tokens, resource sharing, and when…
11 min read
SCIM Provisioning from Microsoft Entra ID to Keycloak 26.6+
Learn how to configure SCIM provisioning from Microsoft Entra ID to Keycloak 26.6+, including user sync, deprovisioning, and custom attributes
4 min read
Keycloak Authorization Services: Policy Types Explained
Keycloak Authorization Services explained: resources, scopes, permissions, and every policy type (role, group, time, regex, JS, aggregate) and when to…
11 min read
Keycloak on OpenShift (ARO): HA That Survives Audits
Run Keycloak on OpenShift and Azure Red Hat OpenShift in production: operator vs Helm, HA clustering, TLS route modes, and…
8 min read
8 Default Configurations to Adjust Right Away on Your Keycloak Cluster
Optimize your Keycloak cluster by adjusting these 8 critical default configurations for database, HTTPS, email, sessions, grants, admin security, and…
14 min read
Top 7 Keycloak Cluster Configuration Best Practices
Learn the top 7 Keycloak cluster configuration best practices covering discovery, Infinispan caching, database pooling, sticky sessions, and monitoring.
12 min read
How to Configure Microsoft Entra ID as a SAML Identity Provider in Keycloak
Step-by-step guide to configuring Microsoft Entra ID as a SAML identity provider in Keycloak, with attribute mappers, metadata import, and…
13 min read
Migrating from Self-Hosted Keycloak to Skycloak in Under 30 Minutes
A new wizard takes your Keycloak pg_dump, theme, and extensions and provisions a managed cluster with everything already in place.…
7 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.