Insights on Identity, Security & Keycloak
Tutorials, deep dives, and best practices from the Skycloak team.
What Should Your Board Know About Customer Login Risk?
A plain-language board briefing on customer login risk: the six facts to report, how to name gaps without alarm, and…
7 min read
CVE-2026-107121: Keycloak SMTP StartTLS Plaintext Downgrade
Keycloak 26.8.1 fixes CVE-2026-107121: realm SMTP with StartTLS on could still send credentials in plaintext. What changed, who is affected,…
8 min read
Is Waiting to Replace Your Identity Provider Cheaper?
Waiting to replace your identity provider is cheaper only while nothing changes. How the cost of staying grows, what moving…
8 min read
What Login Uptime Can You Promise an Enterprise Customer?
What login uptime a SaaS company can honestly promise an enterprise customer: how to add up your dependencies, the downtime…
8 min read
How Many Customer SSO Setups Can Your Team Support?
How much engineering and support time each customer SSO setup takes, how it grows past the first few, and three…
11 min read
Vendor Security Assessment: Login Evidence Buyers Ask For
A vendor security assessment goes past the questionnaire and asks for proof. Here are the five kinds of login evidence…
9 min read
OAuth Grant Sprawl and OAuth Token Management for Admins
OAuth grant sprawl is long-lived third-party app consent that outlives the employee and the need. How OAuth token management finds,…
9 min read
SCIM Authentication: How to Harden Provisioning Endpoints
SCIM authentication usually rests on one bearer token with write access to your users and groups. Here is how to…
10 min read
What Does Login Cost Your Engineering Team Each Quarter?
The cost of building authentication is recurring engineering time, not a one-off build. Use this worksheet to total your in-house…
9 min read
Enterprise Passkeys for B2B SaaS: vs Magic Links and Passwords
Enterprise passkeys usually mean synced passkeys or hardware keys. How they compare with magic links and passwords in B2B SaaS,…
10 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.