Tag

provisioning

Articles tagged with provisioning.

security-best-practices

SCIM Authentication: How to Harden Provisioning Endpoints

SCIM authentication usually rests on one bearer token with write access to your users and groups. Here is how to…

Guilliano MolaireGuilliano Molaire10 min read
keycloak-operations

Keycloak 26.8 SCIM API: Supported and On by Default

Keycloak 26.8 makes the native SCIM API supported and on by default, but each realm still needs its own toggle.…

Guilliano MolaireGuilliano Molaire13 min read
keycloak-operations

Keycloak Native SCIM API Preview in 26.7: What It Covers, What It Misses, and When Managed Still Wins

Keycloak 26.7 promotes its native SCIM API to preview behind the scim-api flag. It handles CRUD, PATCH and filtering, but…

Guilliano MolaireGuilliano Molaire9 min read
Tutorials

SCIM API: Building and Testing a SCIM 2.0 Endpoint

What a SCIM API has to implement to satisfy Okta and Entra ID: endpoints, PATCH semantics, filtering, pagination, error shapes,…

Guilliano MolaireGuilliano Molaire7 min read
Definition and Basics

User Provisioning: How Accounts Get Created and Removed

User provisioning is how accounts get created, updated and deactivated across your apps. The four approaches, what each costs, and…

Guilliano MolaireGuilliano Molaire7 min read
comparisons

SCIM vs SAML: What Each Does and When You Need Both

SCIM vs SAML explained: SAML authenticates users at login, SCIM provisions and deprovisions their accounts. What each protocol sends, and…

Guilliano MolaireGuilliano Molaire11 min read
SCIM Provisioning Explained: How It Works and Setup
Definition and Basics

SCIM Provisioning Explained: How It Works and Setup

SCIM provisioning explained: how an identity provider creates, updates and deactivates accounts over SCIM 2.0, with the real requests and…

Guilliano MolaireGuilliano Molaire11 min read

Stay ahead on identity & security

Get tutorials, product updates, and Keycloak tips delivered to your inbox.

© 2026 Skycloak. All Rights Reserved. Design by Yasser SolimanKeycloak™ is a trademark of the Linux Foundation. Skycloak is not affiliated with the Keycloak project.