Tag

keycloak

Articles tagged with keycloak.

migration-guides

Migrating From Azure AD B2C to Keycloak

Migrate from Azure AD B2C to Keycloak: export users and custom policies, recreate user flows as authentication flows, handle password…

Guilliano Molaire Guilliano Molaire 11 min read
Definition and Basics

Keycloak MCP Server 401: Fixing the Audience Claim

MCP clients get a 401 from Keycloak-protected servers because of a wrong aud claim. Here is the RFC 8707 cause,…

Guilliano Molaire Guilliano Molaire 6 min read
Tutorials

Identity Governance Workflows in Keycloak: Access Requests

Build automated access request and approval workflows with Keycloak using custom required actions, the Admin REST API, and group-based access…

Guilliano Molaire Guilliano Molaire 10 min read
Authentication Error Handling: User Experience and Security Balance
Tutorials

Keycloak Authentication Error Handling: Custom Error Pages

Learn how to customize Keycloak error pages, handle OAuth/OIDC errors in your app, and configure brute force protection for secure,…

Guilliano Molaire Guilliano Molaire 11 min read
Reception area with a wall of hanging keys, a uniformed clerk behind the desk, and a cheerful spring robot holding a lit key beside a suitcase.
Tutorials

Keycloak with Spring Boot in Docker, Then Managed

Run Keycloak in Docker with a Spring Boot app, then move the same app to managed Keycloak without changing code.…

Ivan Franchin Ivan Franchin 9 min read
Definition and Basics

Cross-App Access (ID-JAG) for AI Agents, and Where Keycloak Stands

Cross-App Access (ID-JAG) lets your identity provider broker scoped API access for AI agents instead of per-app consent and refresh-token…

Guilliano Molaire Guilliano Molaire 6 min read
Tutorials

Monitoring Keycloak with Prometheus and Grafana

Monitor Keycloak with Prometheus and Grafana: enable metrics, track authentication KPIs, build dashboards, and define SLOs for your identity stack.

Guilliano Molaire Guilliano Molaire 9 min read
keycloak-operations

Keycloak SPI ID Collision: Redis Cache Ran on Infinispan

Keycloak's ProviderManager dedupes SPI factories by provider ID before isSupported() runs. A shared ID of "default" silently dropped our Redis…

Guilliano Molaire Guilliano Molaire 11 min read
Tutorials

Single Sign-On for HashiCorp Vault with Keycloak (OIDC)

Set up OIDC single sign-on for HashiCorp Vault with Keycloak: configure the OIDC auth method, map Keycloak groups to Vault…

Guilliano Molaire Guilliano Molaire 13 min read
Cross-Region Identity Replication: Global Authentication Architecture
Tutorials

Keycloak MFA: Configuration Patterns for Enterprise

How to set up Keycloak MFA: OTP policies, WebAuthn, conditional flows that apply MFA selectively, client-specific overrides, and detecting MFA…

Guilliano Molaire Guilliano Molaire 21 min read

Stay ahead on identity & security

Get tutorials, product updates, and Keycloak tips delivered to your inbox.

© 2026 Skycloak. All Rights Reserved. Design by Yasser Soliman