Insights on Identity, Security & Keycloak
Tutorials, deep dives, and best practices from the Skycloak team.
What Is a Break-Glass Account? Emergency IdP Admin Access
A break-glass account is an emergency admin login kept outside normal SSO and protected by its own offline credential. When…
8 min read
Keycloak vs Microsoft Entra ID: The Self-Hosted Case
Keycloak vs Microsoft Entra ID compared: open-source self-hosted IdP vs Microsoft's cloud identity platform. Licensing, control, ecosystem fit, and cost…
10 min read
The IdP Exit Plan: Avoid Identity Vendor Lock-In
A practical IdP vendor lock-in checklist: password hash export, config and backup portability, retention windows, and the exit questions to…
6 min read
Keycloak CVE-2026-103884: X.509 CRL Path Traversal When CRL Checking Is On
CVE-2026-103884 lets a crafted client certificate steer Keycloak's X.509 CRL loader outside its conf directory. Who is exposed, the real…
12 min read
Entra ID Will Block Login Script Injection: Harden Keycloak CSP
Microsoft Entra ID will enforce a strict CSP on sign-in pages in mid-October 2026. How Keycloak sets CSP per realm,…
12 min read
IAM vs IGA: What Identity Governance and Administration Adds for Growing SaaS Teams
IAM decides who can sign in; IGA shows who should have access, who approved it and that it was removed.…
11 min read
What Is a User Access Review? A SOC 2 Ready Process for SaaS Teams (Plus Template)
A user access review checks that every account and permission is still needed. Learn the five-step process, review cadence, SOC…
13 min read
What Is Account Takeover (ATO)? How SaaS Teams Detect and Prevent It
Account takeover (ATO) means an attacker controls a real user's account. How it differs from a breach, the seven entry…
14 min read
Keycloak SSO for Backstage: The Developer-Portal Auth Guide
Add Keycloak single sign-on to Backstage with the OIDC auth provider: configure it, resolve users to catalog identities, and protect…
10 min read
Auth0 vs Okta (2026): Which Fits Your B2B SaaS?
Auth0 and Okta share a parent company but not a product. Okta Workforce Identity is for employee apps; Auth0 is…
7 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.