Insights on Identity, Security & Keycloak
Tutorials, deep dives, and best practices from the Skycloak team.
NIST IR 8587 Token Protection: A Keycloak Control Map
NIST finalized IR 8587 on 15 September 2026. Here is what it asks of identity providers, mapped to the Keycloak…
14 min read
Agentic Commerce Authentication: Tokens vs Payment Mandates
AI shopping agents need two separate proofs: a token saying who acts for whom, and a signed mandate saying what…
9 min read
Okta Managed MCP Server vs Keycloak for Conversational IAM
Okta's hosted MCP server lets you administer your org in natural language. Here is what it does, and how the…
9 min read
Entra Is Retiring SMS MFA: A Keycloak Passkey Migration Plan
Microsoft retires its own SMS and voice MFA delivery on 1 February 2027. Here is what that actually changes, and…
11 min read
Auth0 B2B Connect and Tenancy-as-a-Service vs Keycloak Organizations for Multi-Tenant SaaS
Auth0 packaged B2B tenancy across 2026. Keycloak 26.7 answered the same delegated-admin problem with organization-scoped admin permissions. How they compare.
9 min read
EUDI Wallet Relying Party with Keycloak: Where OpenID4VP Support Actually Stands
Keycloak's OID4VP wallet verifier is merged upstream behind an experimental flag but ships in no release as of 26.7.3. Here…
9 min read
Keycloak CIMD for MCP: Client ID Metadata Documents for Claude Code and VS Code
Keycloak has shipped experimental CIMD support since 26.6 behind the cimd flag. Here is the client policy that lets Claude…
11 min read
CVE-2026-17048: Keycloak’s Admin REST API Can Hand Back a Vault-Resolved Client Secret
CVE-2026-17048 lets a view-only Keycloak admin read the plaintext of a vault-backed rotated client secret. CVSS 5.5, fixed in 26.7.2…
9 min read
Agentic IAM in September 2026: What Okta Agent SSO, Ping, and JumpCloud Mean If You Run Keycloak
Okta, Ping and JumpCloud all shipped agentic IAM in the last three weeks. Here is what those launches actually add,…
11 min read
Keycloak Native SCIM API Preview in 26.7: What It Covers, What It Misses, and When Managed Still Wins
Keycloak 26.7 promotes its native SCIM API to preview behind the scim-api flag. It handles CRUD, PATCH and filtering, but…
9 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.