identity-brokering
Articles tagged with identity-brokering.
Authentication Methods Explained: What Keycloak Supports
Authentication methods prove who a user is with something they know, have or are. See the main types, and which…
14 min readJWT sub Claim Explained: Unique Only Per Issuer
The JWT sub claim identifies a user only within one issuer. Why your key must be iss plus sub, why…
8 min readWhat Is Identity Brokering? One Login Box for Social and Enterprise IdPs
Identity brokering lets one identity provider sign users in through Google, Okta or Entra and issue its own token. Learn…
7 min readHome Realm Discovery on Keycloak: Email Domain Routing
Home realm discovery sends user@customer.com to the right corporate IdP without a picker. How Keycloak 26.8 Organizations does it, and…
8 min readCVE-2026-19607: Keycloak Username Takeover and Account Lockout
CVE-2026-19607: a brokered login whose email matches a Keycloak username shadows that user and locks them out. Fixed in 26.7.4.…
11 min readAzure AD B2C Custom Policies (IEF) to Keycloak Flows: Mapping Guide
Map Azure AD B2C custom policies to Keycloak: TrustFramework XML, technical profiles, claims transformations, and user journeys translated into Keycloak…
12 min readCVE-2026-82968: Hardening Keycloak First-Broker Login While the Fix Is Pending
CVE-2026-82968 lets an attacker on the same social provider intercept Keycloak account linking. CVSS 6.4, no patched release yet. What…
8 min readKeycloak Is Not Your Identity Store: Shadow Accounts and the Broker Pattern
Keycloak rarely owns your users. It keeps shadow accounts, authenticates, and issues a JWT. Where identity, authentication, and authorization really…
11 min read
IdP vs SP: Identity Provider and Service Provider Explained
IdP vs SP explained: the identity provider checks credentials and signs an assertion, the service provider trusts it. Where each…
15 min read
Social Login Implementation: Step-by-Step Guide (2026)
Step-by-step social login with OAuth authentication: Google, GitHub, and Microsoft setup, Keycloak broker config, duplicate email account linking, and mappers.
9 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.