keycloak
Articles tagged with keycloak.
How to deploy a custom PasswordHashProvider SPI in Keycloak
Build a bcrypt PasswordHashProvider for Keycloak 26.4, register its factory, install the JAR with kc.sh build and verify imported legacy…
5 min readGrafana SSO with Keycloak (and Securing Prometheus)
Set up Grafana single sign-on with Keycloak via OIDC, map Keycloak roles to Grafana org roles, and secure Prometheus behind…
10 min read
How to set up Jira Cloud SAML single sign-on with Keycloak
Keycloak Jira SAML setup: add a SAML identity provider in Atlassian, create a Keycloak SAML client from its entity ID…
5 min read
Connect claude.ai to Keycloak with CIMD: Fix the JWT Grant Error
claude.ai fails on Keycloak CIMD with a JWT grant error in public clients. Here is the tested fix: Keycloak 26.8,…
7 min read
Authentication Methods Explained: What Keycloak Supports
Authentication methods prove who a user is with something they know, have or are. See the main types, and which…
14 min read
What Is PKCE? Proof Key for Code Exchange Explained
PKCE protects the OAuth 2.0 authorization code flow from stolen codes. Follow one S256 exchange with real values, and learn…
12 min read
Keycloak 26.8.2 Admin API Returns 401 for Service Accounts: The kc-admin-api Scope Fix
After upgrading to Keycloak 26.8.2, service account tokens get 401 from the Admin REST API. Why the new audience check…
7 min read
How to change the username label on the Keycloak login page
To change the username label on the Keycloak login page, add a realm override for usernameOrEmail, username or email in…
4 min readKeycloak as an Identity Provider for Cloudflare Access
Use Keycloak as an OIDC identity provider for Cloudflare Access (Zero Trust): configure the integration, pass groups for policies, and…
10 min readSecuring Hasura GraphQL with Keycloak JWT Claims
Secure Hasura GraphQL with Keycloak: configure JWT mode, add the x-hasura-* custom claims via a protocol mapper, and map Keycloak…
10 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.