Insights on Identity, Security & Keycloak
Tutorials, deep dives, and best practices from the Skycloak team.
Dual-Run Cutover from Azure AD B2C: Passwords, Apps, and Rollback
Plan an Azure B2C migration that cannot lock customers out: dual-run both IdPs, handle unexportable password hashes, cut apps in…
11 min read
Azure AD B2C Custom Policies (IEF) to Keycloak Flows: Mapping Guide
Map Azure AD B2C custom policies to Keycloak: TrustFramework XML, technical profiles, claims transformations, and user journeys translated into Keycloak…
12 min read
Azure AD B2C vs Entra External ID vs Keycloak: Three Exit Paths
Azure AD B2C is closed to new customers. Compare the three exit paths: stay on B2C, move to Microsoft Entra…
10 min read
Azure AD B2C End of Sale and Support Timeline (What Microsoft Actually Said)
What Microsoft actually said about Azure AD B2C: end of sale for new customers on May 1, 2025, support until…
10 min read
Auth0 FGA Permissions Index vs Keycloak: ReBAC Without a Vendor Index
Auth0 FGA Permissions Index precomputes ReBAC permissions for search and RAG. Here is when Keycloak Authorization Services, OpenFGA or OPA…
7 min read
CVE-2026-93999: Keycloak Refresh Restores a Disabled Audience
Keycloak checks an audience client is enabled during token exchange, but not when that refresh token is used. What CVE-2026-93999…
9 min read
Workload Identity Federation to Keycloak: SPIFFE JWT-SVID as Client Auth
An IETF draft lets workloads authenticate to an OAuth server with SPIFFE JWT-SVIDs, not client secrets. What it specifies and…
8 min read
Enterprise SSO That Survives IdP Changes
How to architect enterprise SSO so switching identity providers does not break your applications, with Keycloak identity hub patterns and…
9 min read
Federated Identity Management for B2B SaaS on Skycloak Organizations
How B2B SaaS uses federated identity management to let enterprise customers bring their own IdP, and how to implement it…
9 min read
Federated SSO vs a Single IdP: When You Need an Identity Hub
When federated SSO makes sense, how an identity hub works, and step-by-step Skycloak setup for OIDC and SAML identity providers…
9 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.