Blog

Insights on Identity, Security & Keycloak

Tutorials, deep dives, and best practices from the Skycloak team.

Attribute mapper
Tutorials

Attribute Mapping when using Keycloak as a SAML SP

Learn how to map SAML user attributes like email and name from Okta into Keycloak when using Keycloak as a…

George Thomas George Thomas 3 min read
sequence of request
Tutorials

Using Keycloak Identity Brokering to Add GitHub Social Login

Learn how to configure GitHub as an identity provider in Keycloak using identity brokering for seamless social login with Skycloak…

George Thomas George Thomas 4 min read
title
Tutorials

Configuring Keycloak as a SAML Service Provider

Step-by-step guide to configure Keycloak as a SAML Service Provider with Okta as the IdP using Identity Brokering for seamless…

George Thomas George Thomas 4 min read
Passkey as second factor
Tutorials

Keycloak WebAuthn: Enabling Passkeys for 2FA

Step-by-step guide to configuring Keycloak WebAuthn passkeys as a second-factor authentication method using the default browser flow.

George Thomas George Thomas 3 min read
Passkey login
Tutorials

Keycloak WebAuthn Passwordless with Passkeys

Learn how to configure Keycloak for passwordless authentication using WebAuthn passkeys with FIDO2 standards for phishing-resistant login.

George Thomas George Thomas 3 min read
Multi-tenancy
Tutorials

Multitenancy in Keycloak Using the Organizations Feature

Learn how to implement multitenancy in Keycloak using the Organizations feature to link external identity providers and streamline B2B authentication.

George Thomas George Thomas 4 min read
best-practices

Testing Keycloak: Automated Validation with Testcontainers, Postman, and Cypress

Learn Keycloak testing and automated validation strategies using Testcontainers, Postman, and Cypress to build reliable identity infrastructure.

Guilliano Molaire Guilliano Molaire 12 min read
best-practices

Scaling Keycloak: Clustering, Caching, and Load Testing for Production

Learn how to scale Keycloak for production with clustering, Infinispan caching, database optimization, and load testing strategies.

Guilliano Molaire Guilliano Molaire 12 min read
automated-idp
guides

OIDC Discovery and Dynamic Registration: Automating Identity Provider Configuration

Automate identity provider configuration with OIDC Discovery and Dynamic Client Registration to reduce errors, improve security, and scale efficiently.

Guilliano Molaire Guilliano Molaire 11 min read
security

Session Management in Distributed Systems: Cookies vs Tokens vs Server-Side Sessions

Compare cookies, tokens, and server-side sessions for distributed systems with security analysis, scalability trade-offs, and Keycloak session management.

Guilliano Molaire Guilliano Molaire 12 min read

Stay ahead on identity & security

Get tutorials, product updates, and Keycloak tips delivered to your inbox.

© 2026 Skycloak. All Rights Reserved. Design by Yasser Soliman