Tag

keycloak

Articles tagged with keycloak.

security

CVE-2026-16072 and CVE-2026-18201: Two Keycloak Organization Permission Gaps

Two moderate Keycloak CVEs let admins act outside their permissions on organizations. What they allow, who is affected, and what…

Guilliano MolaireGuilliano Molaire7 min read
Keycloak Authentication Error Handling: Custom Error Pages
Tutorials

Keycloak Authentication Error Handling: Custom Error Pages

Customize Keycloak error pages, handle OAuth/OIDC errors in your app, and configure brute force protection for secure, user-friendly authentication.

Guilliano MolaireGuilliano Molaire10 min read
guides

How Many Nines Does Your Keycloak SLA Actually Need?

Four nines vs five nines for authentication: what each SLA tier really costs, which Keycloak architecture delivers it, and when…

Guilliano MolaireGuilliano Molaire5 min read
migration-guides

Migrating From Azure AD B2C to Keycloak

Migrate from Azure AD B2C to Keycloak: export users and custom policies, recreate user flows as authentication flows, handle password…

Guilliano MolaireGuilliano Molaire11 min read
Definition and Basics

Keycloak MCP Server 401: Fixing the Audience Claim

MCP clients get a 401 from Keycloak-protected servers because of a wrong aud claim. Here is the RFC 8707 cause,…

Guilliano MolaireGuilliano Molaire5 min read
Keycloak with Spring Boot in Docker, Then Managed
Tutorials

Keycloak with Spring Boot in Docker, Then Managed

Run Keycloak in Docker with a Spring Boot app, then move the same app to managed Keycloak without changing code.…

Ivan FranchinIvan Franchin9 min read
Definition and Basics

Cross-App Access (ID-JAG) for AI Agents, and Where Keycloak Stands

Cross-App Access (ID-JAG) lets your identity provider broker scoped API access for AI agents instead of per-app consent and refresh-token…

Guilliano MolaireGuilliano Molaire6 min read
Monitoring Keycloak with Prometheus and Grafana
Tutorials

Monitoring Keycloak with Prometheus and Grafana

Monitor Keycloak with Prometheus and Grafana: enable metrics, track authentication KPIs, build dashboards, and define SLOs for your identity stack.

Guilliano MolaireGuilliano Molaire7 min read
keycloak-operations

Keycloak SPI ID Collision: Redis Cache Ran on Infinispan

Keycloak's ProviderManager dedupes SPI factories by provider ID before isSupported() runs. A shared "default" ID silently dropped our Redis cache…

Guilliano MolaireGuilliano Molaire11 min read
Tutorials

Single Sign-On for HashiCorp Vault with Keycloak (OIDC)

Set up OIDC single sign-on for HashiCorp Vault with Keycloak: configure the auth method, map groups to Vault policies, and…

Guilliano MolaireGuilliano Molaire13 min read

Stay ahead on identity & security

Get tutorials, product updates, and Keycloak tips delivered to your inbox.

© 2026 Skycloak. All Rights Reserved. Design by Yasser SolimanKeycloak™ is a trademark of the Linux Foundation. Skycloak is not affiliated with the Keycloak project.