keycloak
Articles tagged with keycloak.
What Is Just-in-Time (JIT) Access? JIT vs Standing Privileges
Just-in-time access grants a permission for one task and a limited time, then removes it. How JIT differs from standing…
7 min readAccess Token vs Refresh Token: Key Differences
Access tokens authorize API calls briefly; refresh tokens only obtain new tokens. How they differ, and what Gitea 28.1.0 fixed…
8 min readKeycloak Client Secret Rotation in 26.8: How It Works
Keycloak 26.8 makes client secret rotation supported: two secrets overlap during a rotation, but nothing rotates on a timer and…
8 min readWhat Is a SAML Assertion? Structure and Signatures
A SAML assertion is the identity provider's signed statement about a user. Learn its XML structure, how it differs from…
10 min readKeycloak 26.8.1 SAML Logout Fix: One Client Could End Another's Sessions
Keycloak 26.8.1 changes how SAML single logout treats a SessionIndex owned by another client. What the code did before, what…
6 min readWhat Is Password Spraying? vs Credential Stuffing, and How to Stop It
Password spraying tries a few common passwords on many accounts, so no lockout fires. How it differs from credential stuffing,…
6 min read
Identity Governance Workflows in Keycloak: Access Requests
Build automated access request and approval workflows with Keycloak using custom required actions, the Admin REST API, and group-based access…
10 min readCVE-2026-107121: Keycloak SMTP StartTLS Plaintext Downgrade
Keycloak 26.8.1 fixes CVE-2026-107121: realm SMTP with StartTLS on could still send credentials in plaintext. What changed, who is affected,…
8 min readHow Many Customer SSO Setups Can Your Team Support?
How much engineering and support time each customer SSO setup takes, how it grows past the first few, and three…
11 min readOAuth Grant Sprawl and OAuth Token Management for Admins
OAuth grant sprawl is long-lived third-party app consent that outlives the employee and the need. How OAuth token management finds,…
9 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.