Authentication
Articles tagged with authentication.

Authentication Methods Explained: What Keycloak Supports
Authentication methods prove who a user is with something they know, have or are. See the main types, and which…
Keycloak vs Kinde: Control, Enterprise SSO and Cost at Scale
Keycloak vs Kinde compared: hosting and data residency, SAML, LDAP and SCIM, extensibility, cost at scale, and how to migrate…
Authentication vs Authorization: Why Valid Logins Get 403
Authentication proves who is calling, authorization decides what they may do. See a Keycloak token pass every check and still…
What Is a JWT Token? Structure, Claims and Signatures
A JWT token is a signed Base64URL string with a header, payload and signature. What each part holds, which claims…
Azure AD B2C Custom Policies (IEF) to Keycloak Flows: Mapping Guide
Map Azure AD B2C custom policies to Keycloak: TrustFramework XML, technical profiles, claims transformations, and user journeys translated into Keycloak…

Keycloak Authentication Error Handling: Custom Error Pages
Customize Keycloak error pages, handle OAuth/OIDC errors in your app, and configure brute force protection for secure, user-friendly authentication.

Keycloak MFA: Configuration Patterns for Enterprise
How to set up Keycloak MFA: OTP policies, WebAuthn, conditional flows that apply MFA selectively, client-specific overrides, and detecting MFA…
Keycloak Password Policy Best Practices
Keycloak password policies the modern way: length over complexity, breached-password and blacklist checks, hashing iterations, and per-realm enforcement.

Keycloak with Angular: Modern Integration Guide (vs MSAL)
Integrate Keycloak with Angular 22 using keycloak-angular v22: provideKeycloak, auto token refresh, functional interceptors, plus when MSAL fits instead.

How to Enable User Registration in Keycloak (26.x Guide)
Enable self-registration in Keycloak 26.x: the Login tab toggle, the new email-first password flow, custom fields via user profile, and…
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.