Insights on Identity, Security & Keycloak
Tutorials, deep dives, and best practices from the Skycloak team.
Why Your Custom Keycloak Attribute Isn’t in the Token
Fix custom Keycloak user attributes missing from tokens: add a protocol mapper, declare the attribute in User Profile (v24+), and…
9 min read
Keycloak Brute-Force Protection’s Blind Spot: IP Limits and Lockout DoS
Keycloak brute-force detection is per-account, not per-IP, leaving a password-spray gap and a lockout-DoS risk. How it works, the limits,…
10 min read
Why Keycloak Logins Get Slow With Lots of Groups (and How to Fix It)
Fix slow Keycloak logins caused by many groups or roles: how group and role resolution works, why it scales poorly,…
12 min read
Keycloak Database Connection Pool Exhaustion: Causes and Fixes
Fix Keycloak database connection pool exhaustion: size the Quarkus datasource pool, handle DB restarts and leaks, and detect connections growing…
12 min read
Skycloak vs the Community Keycloak Terraform Provider (and How to Use Both)
The difference between the Skycloak and community keycloak/keycloak Terraform providers, when to use each, and how to run both in…
7 min read
Revoke One Keycloak Session Without Logging the User Out Everywhere
How to revoke a single Keycloak session or refresh token without ending all of a user's sessions: the logout endpoint,…
9 min read
Fixing Keycloak’s 431 ‘Request Header Fields Too Large’
Fix Keycloak HTTP 431 'Request Header Fields Too Large' errors: raise Quarkus header limits and shrink bloated tokens by trimming…
11 min read
Understanding JWKS: JSON Web Key Sets Explained
What a JWKS (JSON Web Key Set) is, every field explained (kty, kid, use, n, e), how Keycloak publishes keys…
10 min read
How to Verify a Keycloak Access Token on the Backend
Verify Keycloak access tokens on your backend: local JWT signature checks with JWKS, token introspection, claim validation, and Java, Node,…
12 min read
Keycloak ‘Token Not Active’ Clock Skew: How to Fix
Fix Keycloak 'token is not active' and 'JWT issued in the future' errors caused by clock skew: sync server time…
10 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.