Tag

device-flow

Articles tagged with device-flow.

security

Device Code Phishing and Passkey Lures: Harden Keycloak Against AiTM

Microsoft's September 2026 report shows passkey-themed lures driving AiTM and device-code attacks. Here is the Keycloak realm hardening that answers…

Guilliano MolaireGuilliano Molaire12 min read
security

CVE-2026-88770: Keycloak's Device Flow Can Still Issue Tokens for a Locked Account

CVE-2026-88770 lets Keycloak's device authorization grant redeem tokens for an account brute-force protection already locked. CVSS 6.5, no patch yet.

Guilliano MolaireGuilliano Molaire8 min read
auth-patterns

Keycloak OAuth Device Flow for IoT and CLI Apps

Implement the OAuth 2.0 Device Authorization Grant with Keycloak for CLI tools, smart TVs, and IoT devices. Includes Python and…

Guilliano MolaireGuilliano Molaire8 min read

Stay ahead on identity & security

Get tutorials, product updates, and Keycloak tips delivered to your inbox.

Book a demoTalk to Sales
© 2026 Skycloak. All Rights Reserved. Design by Yasser SolimanKeycloak™ is a trademark of the Linux Foundation. Skycloak is not affiliated with the Keycloak project.