Insights on Identity, Security & Keycloak
Tutorials, deep dives, and best practices from the Skycloak team.
Keycloak Authentication in ASP.NET Core (.NET 8)
Secure an ASP.NET Core (.NET 8) API and web app with Keycloak: OpenID Connect login, JWT bearer validation, role-based authorization,…
11 min read
Customizing Keycloak Themes with Keycloakify in Skycloak
Learn how to customize Keycloak themes using Keycloakify and deploy them in Skycloak managed Keycloak environments.
3 min read
Introducing Locke: a Keycloak Distribution That Lets You Choose Your Cache
Locke is an Apache 2.0 Keycloak distribution with embedded Infinispan or a Redis cache backend, selectable at boot with KC_CACHE,…
6 min read
Third-Party Cookies, FedCM, and What Breaks in Keycloak.js
How third-party cookie deprecation breaks Keycloak's silent SSO and session checks in keycloak.js, what FedCM is, and how to keep…
13 min read
Keycloak CAEP & Shared Signals: Continuous Access Evaluation
What CAEP and the Shared Signals Framework are, where Keycloak's experimental SSF support stands (targeting v26.7.0), and how to approximate…
9 min read
Keycloak vs WorkOS: B2B SSO Compared
Keycloak vs WorkOS for B2B SaaS: open-source self-hosted IdP vs a managed enterprise-SSO API. Licensing, SSO/SCIM, control, and cost model…
11 min read
Keycloak vs AWS IAM Identity Center: Workforce SSO Compared
Keycloak vs AWS IAM Identity Center compared: scope, AWS-account permission sets, hosting, cost, and why teams often federate Keycloak into…
9 min read
Keycloak vs Zitadel: Open-Source IAM Compared
Keycloak vs Zitadel compared on licensing, architecture, multi-tenancy, self-hosting, and extensibility to help you choose the right open-source IAM platform.
9 min read
Is Self-Hosting Keycloak Worth It in 2026? An Honest Reality Check
Is self-hosting Keycloak worth it? An honest look at the real operational burden, when self-hosting wins, and when managed Keycloak…
10 min read
Keycloak on Redis: Benchmarking Locke vs Embedded Infinispan
A production benchmark of Keycloak caching on Redis (Locke) vs embedded Infinispan: ~100% throughput parity, sub-second node-loss recovery vs 31-40s.
10 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.