Insights on Identity, Security & Keycloak
Tutorials, deep dives, and best practices from the Skycloak team.
Home Realm Discovery on Keycloak: Email Domain Routing
Home realm discovery sends [email protected] to the right corporate IdP without a picker. How Keycloak 26.8 Organizations does it, and…
8 min read
JIT Provisioning vs SCIM: When Is First Login Enough?
Just-in-time provisioning creates a user at first login, but never removes one. Compare JIT and SCIM, and decide which your…
7 min read
Session Hijacking: Why MFA Doesn’t Save a Stolen Session
Session hijacking uses a stolen cookie or token, so MFA never fires. How infostealers do it, what limits the damage,…
8 min read
What Is Credential Stuffing? Vs Brute Force, and How to Stop It
Credential stuffing replays leaked username and password pairs against your login. How it differs from brute force, what to watch…
7 min read
How to Choose an SSO Provider: Enterprise SSO for B2B SaaS
Choosing an SSO provider for B2B SaaS? Use this checklist of protocols, flows, provisioning and pricing models, plus questions to…
6 min read
IdP-Initiated vs SP-Initiated SSO: Which Flow to Use
SP-initiated SSO starts in your app; IdP-initiated SSO starts in the customer's portal. Learn the security tradeoffs and what to…
6 min read
What Is an Identity Provider? IdP and SSO Examples
What is an identity provider? Learn what SSO IdP means, follow a sign-in through SAML and OIDC, and compare workforce…
9 min read
What Is IDaaS? Identity as a Service Explained
IDaaS (identity as a service) means a vendor runs your login, MFA, SSO and tokens in the cloud. See what…
6 min read
Better Auth 1.7.7: OAuth State vs Magic-Link Tokens
Better Auth 1.7.7 stops OAuth state values being redeemed as magic-link tokens. What went wrong, how to upgrade, and how…
11 min read
Entra SSPR Registered Methods and Keycloak Account Recovery
Entra SSPR will stop accepting unregistered directory phones and emails for password reset. What changes, and how to apply the…
10 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.