Insights on Identity, Security & Keycloak
Tutorials, deep dives, and best practices from the Skycloak team.
Configuring MFA in Keycloak: Enterprise Patterns
A practical guide to configuring MFA in Keycloak, covering OTP policies, WebAuthn, conditional flows, client-specific overrides, and token-based MFA detection.
13 min read
Authentication Error Handling in Keycloak: Customizing Error Pages and User Experience
Learn how to customize Keycloak error pages, handle OAuth/OIDC errors in your app, and configure brute force protection for secure,…
11 min read
8 Default Configurations to Adjust Right Away on Your Keycloak Cluster
Optimize your Keycloak cluster by adjusting these 8 critical default configurations for database, HTTPS, email, sessions, grants, admin security, and…
14 min read
Top 7 Keycloak Cluster Configuration Best Practices
Learn the top 7 Keycloak cluster configuration best practices covering discovery, Infinispan caching, database pooling, sticky sessions, and monitoring.
12 min read
How to Configure Microsoft Entra ID as a SAML Identity Provider in Keycloak
Step-by-step guide to configuring Microsoft Entra ID as a SAML identity provider in Keycloak, with attribute mappers, metadata import, and…
13 min read
Migrating from Self-Hosted Keycloak to Skycloak in Under 30 Minutes
A new wizard takes your Keycloak pg_dump, theme, and extensions and provisions a managed cluster with everything already in place.…
7 min read
Keycloak Auditing & Event Logging: The Complete Guide
A complete guide to Keycloak auditing: login and admin events, event listeners, retention, SIEM forwarding, alerting, and security best practices.
16 min read
Keycloak Passkeys & WebAuthn: The Complete Guide
Set up passkeys and WebAuthn in Keycloak for passwordless login and two-factor auth: required actions, authentication flows, policies, and browser…
13 min read
Keycloak as a SAML Service Provider: The Complete Guide
Configure Keycloak as a SAML 2.0 Service Provider: identity brokering, metadata exchange, assertion validation, attribute mapping, and common SP errors.
14 min read
Keycloak vs Stytch: Comparison for Modern Auth
Keycloak vs Stytch compared: open-source self-hosted IdP vs a developer-first passwordless auth API. Protocols, passwordless/passkeys, control, and cost model.
10 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.