oauth
Articles tagged with oauth.
Non-Human Identity (NHI) for AI Agents on Keycloak
A non-human identity is an identity used by software, not a person. How AI agents fit, why one shared bot…
10 min readMicrosoft Entra Agent ID vs Keycloak for AI Agent Identity
Microsoft Entra Agent ID gives AI agents directory identities. Here is how blueprints, FIC and agent OBO map to Keycloak…
13 min readOkta Agent Gateway vs Keycloak for MCP Authorization
Okta Agent Gateway puts policy inline between AI agents and MCP tools. Here is what it adds, and why MCP…
12 min readMCP Python SDK OAuth Flaw: Pin the Issuer on Keycloak
MCP OAuth flaw GHSA-qx49-fqc8-xw99: a malicious server could steal client secrets and PKCE verifiers from the MCP Python SDK. Upgrade,…
12 min readCVE-2026-97846: Keycloak Token Exchange Drops mTLS Binding
CVE-2026-97846 lets Keycloak standard token exchange issue an unbound Bearer token for an mTLS-bound client. What it breaks, who is…
11 min readAgentCore Identity Consent Portal vs Keycloak for AI Agent OAuth
AWS now hosts the OAuth consent portal for Bedrock AgentCore agents. What it removes, what it actually couples, and where…
9 min readCVE-2026-59822 (GHSA-7488-6r32-c95q): LiteLLM MCP Auth Bypass, Versions, Fix and Rotation
CVE-2026-59822 lets any fake Bearer token open a LiteLLM MCP session in versions below 1.84.0. Check your version, upgrade or…
11 min readCVE-2026-93999: Keycloak Refresh Restores a Disabled Audience
Keycloak checks an audience client is enabled during token exchange, but not when that refresh token is used. What CVE-2026-93999…
8 min readWorkload Identity Federation to Keycloak: SPIFFE JWT-SVID as Client Auth
An IETF draft lets workloads authenticate to an OAuth server with SPIFFE JWT-SVIDs, not client secrets. What it specifies and…
8 min readAgentic Commerce Authentication: Tokens vs Payment Mandates
AI shopping agents need two separate proofs: a token saying who acts for whom, and a signed mandate saying what…
9 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.