Blog

Insights on Identity, Security & Keycloak

Tutorials, deep dives, and best practices from the Skycloak team.

security

Keycloak Auditing & Event Logging: The Complete Guide

A complete guide to Keycloak auditing: login and admin events, event listeners, retention, SIEM forwarding, alerting, and security best practices.

Guilliano Molaire Guilliano Molaire 16 min read
Tutorials

Keycloak Passkeys & WebAuthn: The Complete Guide

Set up passkey authentication in Keycloak with WebAuthn, for passwordless login and phishing-resistant 2FA: required actions, flows, policies, browser support.

Guilliano Molaire Guilliano Molaire 14 min read
Tutorials

Keycloak as a SAML Service Provider: The Complete Guide

Configure Keycloak as a SAML 2.0 Service Provider: identity brokering, metadata exchange, assertion validation, attribute mapping, and common SP errors.

Guilliano Molaire Guilliano Molaire 14 min read
comparisons

Keycloak vs Stytch: Comparison for Modern Auth

Keycloak vs Stytch compared: open-source self-hosted IdP vs a developer-first passwordless auth API. Protocols, passwordless/passkeys, control, and cost model.

Guilliano Molaire Guilliano Molaire 10 min read
keycloak-operations

Keycloak Backup and Restore: A Practical Guide

How to back up and restore Keycloak: why the database is the source of truth, backing up PostgreSQL, realm exports…

Guilliano Molaire Guilliano Molaire 17 min read
security

The Keycloak Security Hardening Checklist

Keycloak security hardening checklist: TLS, proxy and hostname config, brute-force defense, token and session settings, admin access, and audit logging.

Guilliano Molaire Guilliano Molaire 10 min read
Dashboard showing Java app performance: 81.1K realms cached, JVM heap 1.54 GiB (19.3% usage), GC pause ~2.6 ms; cache and heap trend charts; GC and HTTP request-rate panels for last 3 hours.
keycloak-operations

How Many Realms Can One Keycloak Cluster Handle? We Measured It

How many realms one Keycloak cluster can handle, measured: the cache settings to reach thousands, why restarts hit 7.5 minutes,…

Guilliano Molaire Guilliano Molaire 10 min read
comparisons

Keycloak vs Frontegg: CIAM for B2B SaaS Compared

Keycloak vs Frontegg for B2B SaaS user management: open-source self-hosted IdP vs a managed CIAM with self-service admin portals. Features,…

Guilliano Molaire Guilliano Molaire 9 min read
Claims Mapping
Articles

Microsoft Entra ID Explained for Keycloak Engineers (OIDC)

Every Entra ID concept mapped to its Keycloak equivalent: tenants to realms, app registrations to clients, and where the OIDC…

George Thomas George Thomas 4 min read
Tutorials

Migrating Cloud Foundry UAA to Keycloak: The Playbook

A practical UAA to Keycloak migration guide: map identity zones to realms, rebuild UAA token claims with protocol mappers, and…

Guilliano Molaire Guilliano Molaire 9 min read

Stay ahead on identity & security

Get tutorials, product updates, and Keycloak tips delivered to your inbox.

© 2026 Skycloak. All Rights Reserved. Design by Yasser Soliman