keycloak
Articles tagged with keycloak.
Better Auth 1.7.7: OAuth State vs Magic-Link Tokens
Better Auth 1.7.7 stops OAuth state values being redeemed as magic-link tokens. What went wrong, how to upgrade, and how…
11 min readEntra SSPR Registered Methods and Keycloak Account Recovery
Entra SSPR will stop accepting unregistered directory phones and emails for password reset. What changes, and how to apply the…
10 min readKeycloak Redirect URI Change: Fix HTTP Parameter Pollution
Keycloak 26.8 rejects redirect URIs that already carry state, code or session_state, a check that began in July. Why, what…
11 min readKeycloak 26.8 OpenID4VP Verifier for EUDI Relying Parties
Keycloak 26.8.0 adds an experimental OpenID4VP verifier as an identity provider. What it supports, what it lacks, and a checklist…
14 min readKeycloak 26.8 SCIM API: Supported and On by Default
Keycloak 26.8 makes the native SCIM API supported and on by default, but each realm still needs its own toggle.…
13 min readKeycloak 26.8 Token Exchange Delegation for AI Agents
Keycloak 26.8 moves token exchange delegation to preview: users consent, FGAP V2 gates the agent, and the delegated token carries…
15 min readKeycloak as an AuthZEN Policy Decision Point
Keycloak 26.7 added experimental AuthZEN support, so apps can ask Keycloak for permit or deny decisions over a standard API.…
9 min readIssuing Verifiable Credentials With Keycloak (OID4VCI)
How to issue Verifiable Credentials from Keycloak with OID4VCI: what the standard is, Keycloak's experimental support, and how it fits…
12 min readMCP Authorization Decision Tree: When to Use Keycloak
MCP authorization is optional and stdio servers should skip OAuth. A decision tree for when to use API keys, OAuth,…
8 min readNon-Human Identity (NHI) for AI Agents on Keycloak
A non-human identity is an identity used by software, not a person. How AI agents fit, why one shared bot…
10 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.