keycloak
Articles tagged with keycloak.
Keycloak with Spring Boot in Docker, Then Managed
Run Keycloak in Docker with a Spring Boot app, then move the same app to managed Keycloak without changing code.…
9 min read
SCIM API: Building and Testing a SCIM 2.0 Endpoint
What a SCIM API has to implement to satisfy Okta and Entra ID: endpoints, PATCH semantics, filtering, pagination, error shapes,…
7 min read
User Provisioning: How Accounts Get Created and Removed
User provisioning is how accounts get created, updated and deactivated across your apps. The four approaches, what each costs, and…
7 min read
SCIM vs SAML: What Each Protocol Actually Does
SCIM vs SAML explained: SAML authenticates users at login, SCIM provisions and deprovisions their accounts. What each protocol sends, and…
8 min read
Why Keycloak Breaks MCP Servers (the Audience Claim) and How RFC 8707 Fixes It
MCP clients get a 401 from Keycloak-protected servers because of a wrong aud claim. Here is the RFC 8707 cause,…
6 min read
Cross-App Access (ID-JAG) for AI Agents, and Where Keycloak Stands
Cross-App Access (ID-JAG) lets your identity provider broker scoped API access for AI agents instead of per-app consent and refresh-token…
6 min read
Add Authentication to a Python App on Fly.io with Keycloak
Add OIDC login to a Python app on Fly.io with Keycloak: Flask + Authlib walkthrough, fly secrets, the ProxyFix redirect-URI…
10 min read
Let Product Teams Onboard Apps Without Handing Out Keycloak Admin
Product teams need Keycloak clients. Your IAM team shouldn't hand out admin. Compare the two patterns that work: a self-service…
9 min read
Managing Keycloak Secrets the Right Way (Vault SPI)
Keep secrets out of Keycloak config: use the Keycloak vault SPI to resolve database, SMTP, and client secrets from a…
10 min read
Keycloak Is Not Your Identity Store: Shadow Accounts and the Broker Pattern
Keycloak rarely owns your users. It keeps shadow accounts, authenticates, and issues a JWT. Where identity, authentication, and authorization really…
11 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.