keycloak
Articles tagged with keycloak.
IAM vs IGA: What Identity Governance and Administration Adds for Growing SaaS Teams
IAM decides who can sign in; IGA shows who should have access, who approved it and that it was removed.…
The IdP Exit Plan: Avoid Identity Vendor Lock-In
A practical IdP vendor lock-in checklist: password hash export, config and backup portability, retention windows, and the exit questions to…
Keycloak vs Microsoft Entra ID: The Self-Hosted Case
Keycloak vs Microsoft Entra ID compared: open-source self-hosted IdP vs Microsoft's cloud identity platform. Licensing, control, ecosystem fit, and cost…
What Is a User Access Review? A SOC 2 Ready Process for SaaS Teams (Plus Template)
A user access review checks that every account and permission is still needed. Learn the five-step process, review cadence, SOC…
What Is Account Takeover (ATO)? How SaaS Teams Detect and Prevent It
Account takeover (ATO) means an attacker controls a real user's account. How it differs from a breach, the seven entry…
JIT Provisioning vs SCIM: When Is First Login Enough?
Just-in-time provisioning creates a user at first login, but never removes one. Compare JIT and SCIM, and decide which your…
Keycloak SSO for Backstage: The Developer-Portal Auth Guide
Add Keycloak single sign-on to Backstage with the OIDC auth provider: configure it, resolve users to catalog identities, and protect…
Session Hijacking: Why MFA Doesn't Save a Stolen Session
Session hijacking uses a stolen cookie or token, so MFA never fires. How infostealers do it, what limits the damage,…
What Is Credential Stuffing? Vs Brute Force, and How to Stop It
Credential stuffing replays leaked username and password pairs against your login. How it differs from brute force, what to watch…
What Is an Identity Provider? IdP and SSO Examples
What is an identity provider? Learn what SSO IdP means, follow a sign-in through SAML and OIDC, and compare workforce…
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.