identity
Articles tagged with identity.
Secure Your App with AI: What AI AppSec Can and Cannot Replace in IAM
AI coding agents find bugs and bad configs. They do not replace token issuance, audience checks, step-up, or revocation. Here…
4 min readCross-App Access (ID-JAG) for AI Agents, and Where Keycloak Stands
Cross-App Access (ID-JAG) lets your identity provider broker scoped API access for AI agents instead of per-app consent and refresh-token…
6 min readSCIM API: Building and Testing a SCIM 2.0 Endpoint
What a SCIM API has to implement to satisfy Okta and Entra ID: endpoints, PATCH semantics, filtering, pagination, error shapes,…
7 min readUser Provisioning: How Accounts Get Created and Removed
User provisioning is how accounts get created, updated and deactivated across your apps. The four approaches, what each costs, and…
7 min readSCIM vs SAML: What Each Does and When You Need Both
SCIM vs SAML explained: SAML authenticates users at login, SCIM provisions and deprovisions their accounts. What each protocol sends, and…
11 min read
What is Keycloak? The Complete Developer's Guide
The complete guide to Keycloak: open source IAM for SSO, MFA, user federation, and RBAC. Architecture, features, version history, and…
13 min read
SCIM Provisioning Explained: How It Works and Setup
SCIM provisioning explained: how an identity provider creates, updates and deactivates accounts over SCIM 2.0, with the real requests and…
11 min readKeycloak User Not Found: Debugging Identity Resolution
Troubleshoot Keycloak user not found errors caused by username case sensitivity, realm mismatch, LDAP sync issues, IdP linking, and disabled…
9 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.