sso
Articles tagged with sso.
IdP-Initiated vs SP-Initiated SSO: Which Flow to Use
SP-initiated SSO starts in your app; IdP-initiated SSO starts in the customer's portal. Learn the security tradeoffs and what to…
6 min readWhat Is an Identity Provider? IdP and SSO Examples
What is an identity provider? Learn what SSO IdP means, follow a sign-in through SAML and OIDC, and compare workforce…
9 min readWhat Vendor Security Questionnaires Ask About Login
Login is one of the biggest sections of a vendor security questionnaire. What the SSO, MFA, access review, audit log…
9 min readEnterprise SSO That Survives IdP Changes
How to architect enterprise SSO so switching identity providers does not break your applications, with Keycloak identity hub patterns and…
9 min readFederated SSO vs a Single IdP: When You Need an Identity Hub
When federated SSO makes sense, how an identity hub works, and step-by-step Skycloak setup for OIDC and SAML identity providers…
9 min readSingle Sign-On for HashiCorp Vault with Keycloak (OIDC)
Set up OIDC single sign-on for HashiCorp Vault with Keycloak: configure the auth method, map groups to Vault policies, and…
13 min readSCIM vs SAML: What Each Does and When You Need Both
SCIM vs SAML explained: SAML authenticates users at login, SCIM provisions and deprovisions their accounts. What each protocol sends, and…
11 min read
Decoding SAMLRequest: What It Is and How to Decode It
A SAMLRequest is the Base64-encoded, deflate-compressed XML authentication request an SP sends to an IdP. Learn how to decode it…
6 min read
IdP vs SP: The Difference, and How Keycloak Plays Both Roles
IdP vs SP explained: what each role does in SAML and OIDC, and how Keycloak plays both at once through…
7 min readKeycloak vs authentik: The Honest 2026 Comparison
Keycloak vs authentik in July 2026: an honest scorecard with version-stamped facts, where authentik genuinely wins, where Keycloak does, and…
11 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.