identity-brokering
Articles tagged with identity-brokering.
JWT sub Claim Explained: Unique Only Per Issuer
The JWT sub claim identifies a user only within one issuer. Why your key must be iss plus sub, why…
8 min readWhat Is Identity Brokering? One Login Box for Social and Enterprise IdPs
Identity brokering lets one identity provider sign users in through Google, Okta or Entra and issue its own token. Learn…
7 min readHome Realm Discovery on Keycloak: Email Domain Routing
Home realm discovery sends user@customer.com to the right corporate IdP without a picker. How Keycloak 26.8 Organizations does it, and…
8 min readCVE-2026-19607: Keycloak Username Takeover and Account Lockout
CVE-2026-19607: a brokered login whose email matches a Keycloak username shadows that user and locks them out. Fixed in 26.7.4.…
11 min readAzure AD B2C Custom Policies (IEF) to Keycloak Flows: Mapping Guide
Map Azure AD B2C custom policies to Keycloak: TrustFramework XML, technical profiles, claims transformations, and user journeys translated into Keycloak…
12 min readCVE-2026-82968: Hardening Keycloak First-Broker Login While the Fix Is Pending
CVE-2026-82968 lets an attacker on the same social provider intercept Keycloak account linking. CVSS 6.4, no patched release yet. What…
8 min readKeycloak Is Not Your Identity Store: Shadow Accounts and the Broker Pattern
Keycloak rarely owns your users. It keeps shadow accounts, authenticates, and issues a JWT. Where identity, authentication, and authorization really…
11 min read
IdP vs SP: The Difference, and How Keycloak Plays Both Roles
IdP vs SP explained: what each role does in SAML and OIDC, and how Keycloak plays both at once through…
7 min read
Social Login Implementation: Step-by-Step Guide (2026)
Step-by-step social login with OAuth authentication: Google, GitHub, and Microsoft setup, Keycloak broker config, duplicate email account linking, and mappers.
9 min readKeycloak 'Account Already Exists' During Identity Brokering
Fix the Keycloak 'account already exists' error during social login and identity brokering: the first-login flow, account linking, and trusting…
10 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.