Insights on Identity, Security & Keycloak
Tutorials, deep dives, and best practices from the Skycloak team.
How to Run the Keycloak Admin Console on a Separate Hostname Behind nginx (KC_HOSTNAME_ADMIN)
KC_HOSTNAME_ADMIN does work behind nginx. Serve the Keycloak admin console on a separate hostname with the proxy headers and server…
10 min read
Token and Claims Modeling in Keycloak: Reproducing Legacy IdP Behavior
Reproduce legacy IdP tokens in Keycloak so apps survive cutover. Build a claim contract, map UAA/SiteMinder/Okta claims, and diff old…
16 min read
Dual-Run IAM Migration: Switching Identity Providers Without Downtime
An IAM migration strategy for large estates: run old and new IdPs at once, cut apps over in waves, and…
14 min read
Keycloak and SiteMinder Federation: SAML and OIDC Integration Guide
Keycloak SiteMinder integration without a rip-and-replace: run both side by side, federate over SAML or OIDC, and migrate apps at…
15 min read
Keycloak Refresh Token Rotation: Setup and Best Practices
How to configure refresh token rotation in Keycloak: revoke-on-use, reuse detection, token lifetimes, SPA vs confidential clients, and security best…
11 min read
Keycloak Client Scopes vs Roles: When to Use Each
Keycloak client scopes vs roles explained: what each does, how they shape token claims and scopes, and when to use…
9 min read
Keycloak UMA 2.0: User-Managed Resource Sharing
A practical guide to User-Managed Access (UMA 2.0) in Keycloak: the permission ticket flow, RPT tokens, resource sharing, and when…
11 min read
SCIM Provisioning from Microsoft Entra ID to Keycloak 26.6+
Learn how to configure SCIM provisioning from Microsoft Entra ID to Keycloak 26.6+, including user sync, deprovisioning, and custom attributes
4 min read
Keycloak Authorization Services: Policy Types Explained
Keycloak Authorization Services explained: resources, scopes, permissions, and every policy type (role, group, time, regex, JS, aggregate) and when to…
11 min read
Keycloak on OpenShift (ARO): HA That Survives Audits
Run Keycloak on OpenShift and Azure Red Hat OpenShift in production: operator vs Helm, HA clustering, TLS route modes, and…
8 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.