Insights on Identity, Security & Keycloak
Tutorials, deep dives, and best practices from the Skycloak team.
API Authentication Best Practices in 2026
Comprehensive guide to API authentication in 2026 covering OAuth 2.0 with PKCE, mTLS, DPoP, JWT validation, token introspection, and choosing…
10 min read
JWT Best Practices: Security, Storage, and Rotation
A comprehensive guide to JWT security best practices covering token storage, key rotation, claim validation, refresh token rotation, and Keycloak…
11 min read
Spring Boot + Keycloak OAuth 2.0: The Complete 2026 Guide
The complete guide to securing Spring Boot 3.x apps with Keycloak using spring-security-oauth2-resource-server, JWT validation, and method-level security.
11 min read
OpenID Connect Explained: A Developer’s Guide with Keycloak
A developer's deep dive into OpenID Connect (OIDC) covering ID tokens, claims, scopes, discovery endpoints, and UserInfo with practical Keycloak…
11 min read
Okta vs Keycloak: Policies vs Authentication Flows Details
Compare Okta’s policy-based authentication with Keycloak’s flow-based model. Learn how MFA, fallback, and conditional access work in real-world IAM scenarios.
2 min read
Keycloak 26.6+ Workflows: Automating Identity
Explore Keycloak 26.6 workflows to automate onboarding, enforce policies, and manage user lifecycle with simple YAML-based automation.
3 min read
How to Migrate from Okta to Keycloak
Step-by-step Okta to Keycloak migration guide covering user export, application migration, MFA enrollment, group mapping, and phased rollout strategy.
12 min read
JWT Authorization Grant in Keycloak with Node.js
Learn how to implement JWT Authorization Grant in Keycloak 26.6 using a custom Node.js token issuer, including IDP setup, user…
3 min read
API Keys vs OAuth: When to Use Each with Keycloak
Decision guide comparing API keys and OAuth tokens for API security. Learn when to use each approach, hybrid patterns, and…
9 min read
Keycloak vs SuperTokens: Which Open Source Auth to Choose?
Keycloak vs SuperTokens compared: architecture, features, community support, hosting options, enterprise capabilities, and SDK ecosystem for open-source auth.
8 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.