authorization
Articles tagged with authorization.
Authentication vs Authorization: Why Valid Logins Get 403
Authentication proves who is calling, authorization decides what they may do. See a Keycloak token pass every check and still…
18 min readWhat Is ReBAC? Relationship-Based Access Control vs RBAC
ReBAC grants access from relationships like 'owner of' or 'member of'. How it differs from RBAC and ABAC, when it…
10 min readOAuth Scopes Explained: Standard Scopes, Design, and Scopes vs Claims
An OAuth scope is a named permission a client requests and a token carries. The standard OIDC scopes, scopes vs…
9 min readKeycloak as an AuthZEN Policy Decision Point
Keycloak 26.7 added experimental AuthZEN support, so apps can ask Keycloak for permit or deny decisions over a standard API.…
9 min readAuth0 FGA Permissions Index vs Keycloak: ReBAC Without a Vendor Index
Auth0 FGA Permissions Index precomputes ReBAC permissions for search and RAG. Here is when Keycloak Authorization Services, OpenFGA or OPA…
7 min read
Attribute-Based Access Control: How It Works, When to Use It
ABAC evaluates user, resource, action, and environment attributes at request time. See how it compares to RBAC and ReBAC, plus…
9 min readKeycloak UMA 2.0: User-Managed Resource Sharing
A practical guide to User-Managed Access (UMA 2.0) in Keycloak: the permission ticket flow, RPT tokens, resource sharing, and when…
11 min readKeycloak Authorization Services: Policy Types Explained
Keycloak Authorization Services explained: resources, scopes, permissions, and every policy type (role, group, time, regex, JS, aggregate) and when to…
11 min readKeycloak + OPA: Fine-Grained Authorization Beyond RBAC
Integrate Open Policy Agent with Keycloak for fine-grained authorization. Learn ABAC, ReBAC patterns, Rego policies, sidecar deployment, and decision logging.
7 min read
Zero Trust Authentication with Keycloak
Implement zero trust authentication with Keycloak using continuous verification, context-aware policies, step-up MFA, and real-time session risk scoring.
9 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.