keycloak
Articles tagged with keycloak.
CVE-2026-16072 and CVE-2026-18201: Two Keycloak Organization Permission Gaps
Two moderate Keycloak CVEs let admins act outside their permissions on organizations. What they allow, who is affected, and what…

Keycloak Authentication Error Handling: Custom Error Pages
Customize Keycloak error pages, handle OAuth/OIDC errors in your app, and configure brute force protection for secure, user-friendly authentication.
How Many Nines Does Your Keycloak SLA Actually Need?
Four nines vs five nines for authentication: what each SLA tier really costs, which Keycloak architecture delivers it, and when…
Migrating From Azure AD B2C to Keycloak
Migrate from Azure AD B2C to Keycloak: export users and custom policies, recreate user flows as authentication flows, handle password…
Keycloak MCP Server 401: Fixing the Audience Claim
MCP clients get a 401 from Keycloak-protected servers because of a wrong aud claim. Here is the RFC 8707 cause,…

Keycloak with Spring Boot in Docker, Then Managed
Run Keycloak in Docker with a Spring Boot app, then move the same app to managed Keycloak without changing code.…
Cross-App Access (ID-JAG) for AI Agents, and Where Keycloak Stands
Cross-App Access (ID-JAG) lets your identity provider broker scoped API access for AI agents instead of per-app consent and refresh-token…

Monitoring Keycloak with Prometheus and Grafana
Monitor Keycloak with Prometheus and Grafana: enable metrics, track authentication KPIs, build dashboards, and define SLOs for your identity stack.
Keycloak SPI ID Collision: Redis Cache Ran on Infinispan
Keycloak's ProviderManager dedupes SPI factories by provider ID before isSupported() runs. A shared "default" ID silently dropped our Redis cache…
Single Sign-On for HashiCorp Vault with Keycloak (OIDC)
Set up OIDC single sign-on for HashiCorp Vault with Keycloak: configure the auth method, map groups to Vault policies, and…
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.