Blog

Insights on Identity, Security & Keycloak

Tutorials, deep dives, and best practices from the Skycloak team.

Tutorials

Add Authentication to a Python App on Fly.io with Keycloak

Add OIDC login to a Python app on Fly.io with Keycloak: Flask + Authlib walkthrough, fly secrets, the ProxyFix redirect-URI…

Guilliano Molaire Guilliano Molaire 10 min read
Tutorials

Let Product Teams Onboard Apps Without Handing Out Keycloak Admin

Product teams need Keycloak clients. Your IAM team shouldn't hand out admin. Compare the two patterns that work: a self-service…

George Thomas George Thomas 9 min read
keycloak-operations

Managing Keycloak Secrets the Right Way (Vault SPI)

Keep secrets out of Keycloak config: use the Keycloak vault SPI to resolve database, SMTP, and client secrets from a…

Guilliano Molaire Guilliano Molaire 10 min read
Tutorials

Keycloak Is Not Your Identity Store: Shadow Accounts and the Broker Pattern

Keycloak rarely owns your users. It keeps shadow accounts, authenticates, and issues a JWT. Where identity, authentication, and authorization really…

George Thomas George Thomas 11 min read
Tutorials

Federate or Migrate? Your Legacy User Store Is Now in the Login Path

Federating a legacy user store into Keycloak avoids a big-bang migration, but it puts someone else's database in your login…

George Thomas George Thomas 10 min read
security

Keycloak Password Policy Best Practices

Configure Keycloak password policies the modern way: length over complexity, breached-password and blacklist checks, hashing iterations, and per-realm enforcement.

Guilliano Molaire Guilliano Molaire 9 min read
keycloak-operations

How Much RAM and CPU Does Keycloak Need in Production?

How much RAM and CPU does Keycloak need? What actually drives resource use, realistic starting points, JVM heap sizing, and…

Guilliano Molaire Guilliano Molaire 12 min read
Global DNS diagram: three Keycloak instances connected to a single distributed SQL cluster.
keycloak-operations

Keycloak 26.7 Stateless Mode: Multi-Region Without Infinispan

Keycloak 26.7's stateless preview kills the external Infinispan requirement for multi-cluster. We tested it on YugabyteDB and mapped a multi-cloud…

Guilliano Molaire Guilliano Molaire 9 min read
idaas powerhouse
comparisons

The Top 11 IDaaS Providers Compared (2026 Edition)

Compare 11 IDaaS providers across three categories: Auth0, Cognito, Clerk, Stytch, WorkOS, and managed Keycloak, with verified 2026 pricing at…

Guilliano Molaire Guilliano Molaire 11 min read
keycloak 25
Definition and Basics

Keycloak Versions: Latest Release, History, and Upgrade Guide

Keycloak's latest version is 26.7.0, released July 9, 2026. See the full version history, support policy, and how to upgrade…

Guilliano Molaire Guilliano Molaire 6 min read

Stay ahead on identity & security

Get tutorials, product updates, and Keycloak tips delivered to your inbox.

© 2026 Skycloak. All Rights Reserved. Design by Yasser Soliman