<?xml version="1.0" encoding="UTF-8"?>
<!-- This sitemap was dynamically generated on September 30, 2026 at 4:56 pm by All in One SEO Pro v5.0.2 - the original SEO plugin for WordPress. -->

<?xml-stylesheet type="text/xsl" href="https://skycloak.io/default-sitemap.xsl"?>

<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<title>Skycloak</title>
		<link><![CDATA[https://skycloak.io]]></link>
		<description><![CDATA[Skycloak]]></description>
		<lastBuildDate><![CDATA[Wed, 30 Sep 2026 18:19:04 +0000]]></lastBuildDate>
		<docs>https://validator.w3.org/feed/docs/rss2.html</docs>
		<atom:link href="https://skycloak.io/sitemap.rss" rel="self" type="application/rss+xml" />
		<ttl><![CDATA[60]]></ttl>

		<item>
			<guid><![CDATA[https://skycloak.io/blog/keycloak-token-exchange-how-it-works/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/keycloak-token-exchange-how-it-works/]]></link>
			<title>Keycloak Token Exchange: How It Works (V2 vs V1)</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 18:19:04 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/skycloak-managed-keycloak-azure-ad-b2c-shorter-path/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/skycloak-managed-keycloak-azure-ad-b2c-shorter-path/]]></link>
			<title>Skycloak Shorter Path: Managed Upstream Keycloak for Azure AD B2C Teams</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 17:14:36 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/skycloak-identity-providers-recipe-oidc-saml/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/skycloak-identity-providers-recipe-oidc-saml/]]></link>
			<title>Skycloak Identity Providers Recipe: Add OIDC or SAML IdP in 5 Minutes</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 17:14:35 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/keycloak-brute-force-ip-based-protection-gap/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/keycloak-brute-force-ip-based-protection-gap/]]></link>
			<title>Keycloak Brute-Force Protection&#8217;s Blind Spot: IP Limits and Lockout DoS</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 17:14:34 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/federated-identity-management-b2b-saas-skycloak-organizations/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/federated-identity-management-b2b-saas-skycloak-organizations/]]></link>
			<title>Federated Identity Management for B2B SaaS on Skycloak Organizations</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 17:14:33 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/cve-2026-97846-keycloak-token-exchange-mtls-hok-bypass/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/cve-2026-97846-keycloak-token-exchange-mtls-hok-bypass/]]></link>
			<title>CVE-2026-97846: Keycloak Token Exchange Drops mTLS Binding</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 17:14:32 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/cve-2026-97177-keycloak-fgap-password-reset-bypass/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/cve-2026-97177-keycloak-fgap-password-reset-bypass/]]></link>
			<title>CVE-2026-97177: Keycloak Delegated Admin Account Takeover</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 17:14:30 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/cve-2026-97176-keycloak-loa-acr-cookie-bypass/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/cve-2026-97176-keycloak-loa-acr-cookie-bypass/]]></link>
			<title>CVE-2026-97176: Keycloak Step-Up Authentication Bypass</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 17:14:29 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/cve-2026-96448-keycloak-fgap-composite-role-escalation/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/cve-2026-96448-keycloak-fgap-composite-role-escalation/]]></link>
			<title>CVE-2026-96448: Keycloak FGAP Composite Privilege Escalation</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 17:14:28 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/cve-2026-93999-keycloak-refresh-disabled-audience/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/cve-2026-93999-keycloak-refresh-disabled-audience/]]></link>
			<title>CVE-2026-93999: Keycloak Refresh Restores a Disabled Audience</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 17:14:27 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/cloud-act-european-keycloak-data-sovereignty/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/cloud-act-european-keycloak-data-sovereignty/]]></link>
			<title>The US CLOUD Act and Your Keycloak Data: What It Actually Reaches</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 17:14:25 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/azure-ad-b2c-custom-policies-ief-to-keycloak/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/azure-ad-b2c-custom-policies-ief-to-keycloak/]]></link>
			<title>Azure AD B2C Custom Policies (IEF) to Keycloak Flows: Mapping Guide</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 17:14:24 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/add-skycloak-cursor-mcp/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/add-skycloak-cursor-mcp/]]></link>
			<title>Add Skycloak to Cursor with MCP: Operate Managed Keycloak from Your IDE</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 17:14:23 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/add-authentication-to-a-python-app-on-fly-io/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/add-authentication-to-a-python-app-on-fly-io/]]></link>
			<title>Add Authentication to a Python App on Fly.io with Keycloak</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 17:14:22 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/what-is-hipaa-compliance/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/what-is-hipaa-compliance/]]></link>
			<title>What Is HIPAA Compliance? A Complete Guide for 2026</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 17:01:56 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/skycloak-is-now-soc-2-type-1-certified/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/skycloak-is-now-soc-2-type-1-certified/]]></link>
			<title>Skycloak Is SOC 2 Type 2 Certified: What We Audited and Why It Matters</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 17:01:55 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/scim-integration-between-okta-and-keycloak/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/scim-integration-between-okta-and-keycloak/]]></link>
			<title>SCIM Integration Between Okta and Keycloak</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 17:01:54 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/customizing-keycloak-themes-with-keycloakify-in-skycloak/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/customizing-keycloak-themes-with-keycloakify-in-skycloak/]]></link>
			<title>Customizing Keycloak Themes with Keycloakify in Skycloak</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 17:01:51 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/cve-2026-5430-wso2-jwt-algorithm-confusion-keycloak-resource-servers/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/cve-2026-5430-wso2-jwt-algorithm-confusion-keycloak-resource-servers/]]></link>
			<title>CVE-2026-5430: WSO2 JWT Bypass and Your Keycloak APIs</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 13:00:00 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/entra-agent-id-vs-keycloak-ai-agent-identity/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/entra-agent-id-vs-keycloak-ai-agent-identity/]]></link>
			<title>Microsoft Entra Agent ID vs Keycloak for AI Agent Identity</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 13:00:00 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/okta-agent-gateway-vs-keycloak-ai-agent-authorization/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/okta-agent-gateway-vs-keycloak-ai-agent-authorization/]]></link>
			<title>Okta Agent Gateway vs Keycloak for MCP Authorization</title>
			<pubDate><![CDATA[Wed, 30 Sep 2026 13:00:00 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/is-cognito-still-the-right-fit-as-you-scale/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/is-cognito-still-the-right-fit-as-you-scale/]]></link>
			<title>AWS Cognito Pricing as You Scale: Is It Still the Right Fit?</title>
			<pubDate><![CDATA[Tue, 29 Sep 2026 09:00:00 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/mcp-python-sdk-oauth-credential-theft-keycloak-issuer-pinning/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/mcp-python-sdk-oauth-credential-theft-keycloak-issuer-pinning/]]></link>
			<title>MCP Python SDK OAuth Flaw: Pin the Issuer on Keycloak</title>
			<pubDate><![CDATA[Tue, 29 Sep 2026 09:00:00 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/sso-doesnt-mean-you-pass-procurement/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/sso-doesnt-mean-you-pass-procurement/]]></link>
			<title>Why SSO Alone Won&#8217;t Pass a Vendor Security Review</title>
			<pubDate><![CDATA[Tue, 29 Sep 2026 09:00:00 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/cve-2026-100606-flowise-sso-invitation-takeover-keycloak/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/cve-2026-100606-flowise-sso-invitation-takeover-keycloak/]]></link>
			<title>CVE-2026-100606: Flowise SSO Invite Takeover and IdP Checks</title>
			<pubDate><![CDATA[Mon, 28 Sep 2026 13:00:00 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/soc-2-type-1-or-type-2-which-first/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/soc-2-type-1-or-type-2-which-first/]]></link>
			<title>SOC 2 Type 1 vs Type 2: Which Do You Need First?</title>
			<pubDate><![CDATA[Mon, 28 Sep 2026 13:00:00 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/storm-3168-jadepuffer-service-principal-secrets-keycloak/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/storm-3168-jadepuffer-service-principal-secrets-keycloak/]]></link>
			<title>JADEPUFFER and Storm-3168: Retire Static Keycloak Secrets</title>
			<pubDate><![CDATA[Mon, 28 Sep 2026 13:00:00 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/keycloak-26-7-4-security-fixes-patch-checklist/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/keycloak-26-7-4-security-fixes-patch-checklist/]]></link>
			<title>Keycloak 26.7.4 Security Fixes: A Self-Hosted Patch Checklist</title>
			<pubDate><![CDATA[Sun, 27 Sep 2026 13:00:00 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/keycloak-username-takeover-cve-2026-19607/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/keycloak-username-takeover-cve-2026-19607/]]></link>
			<title>CVE-2026-19607: Keycloak Username Takeover and Account Lockout</title>
			<pubDate><![CDATA[Sun, 27 Sep 2026 13:00:00 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/cve-2026-79651-keycloak-locale-caching-dos/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/cve-2026-79651-keycloak-locale-caching-dos/]]></link>
			<title>CVE-2026-79651: Keycloak Unauthenticated Locale Cache DoS</title>
			<pubDate><![CDATA[Thu, 24 Sep 2026 13:00:00 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/trustsink-rogue-external-mfa-phishing-resistant-keycloak/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/trustsink-rogue-external-mfa-phishing-resistant-keycloak/]]></link>
			<title>TrustSink: Rogue External MFA and Phishing-Resistant Login</title>
			<pubDate><![CDATA[Thu, 24 Sep 2026 13:00:00 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/what-security-questionnaires-ask-about-login/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/what-security-questionnaires-ask-about-login/]]></link>
			<title>What Vendor Security Questionnaires Ask About Login</title>
			<pubDate><![CDATA[Thu, 24 Sep 2026 13:00:00 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/okta-managed-mcp-server-vs-keycloak-conversational-iam/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/okta-managed-mcp-server-vs-keycloak-conversational-iam/]]></link>
			<title>Okta Managed MCP Server vs Keycloak for Conversational IAM</title>
			<pubDate><![CDATA[Wed, 23 Sep 2026 15:57:10 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/why-password-hashing-is-vital-for-security/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/why-password-hashing-is-vital-for-security/]]></link>
			<title>Why Password Hashing Is Vital for Security (and How to Do It Right)</title>
			<pubDate><![CDATA[Wed, 23 Sep 2026 15:55:35 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/loki-to-clickhouse-migration/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/loki-to-clickhouse-migration/]]></link>
			<title>From Loki to ClickHouse: Scaling Our Log Analytics Infrastructure</title>
			<pubDate><![CDATA[Wed, 23 Sep 2026 15:55:33 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/keycloak-vs-okta-enterprise-iam-comparison-guide/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/keycloak-vs-okta-enterprise-iam-comparison-guide/]]></link>
			<title>Keycloak vs Okta: An Honest Workforce IAM Comparison</title>
			<pubDate><![CDATA[Wed, 23 Sep 2026 15:55:32 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/keycloak-security-audit-hardening-checklist/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/keycloak-security-audit-hardening-checklist/]]></link>
			<title>The Keycloak Security Hardening Checklist</title>
			<pubDate><![CDATA[Wed, 23 Sep 2026 15:55:31 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/keycloak-production-sizing-ram-cpu-requirements/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/keycloak-production-sizing-ram-cpu-requirements/]]></link>
			<title>How Much RAM and CPU Does Keycloak Need in Production?</title>
			<pubDate><![CDATA[Wed, 23 Sep 2026 15:55:30 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/keycloak-fine-grained-permissions-opa/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/keycloak-fine-grained-permissions-opa/]]></link>
			<title>Keycloak + OPA: Fine-Grained Authorization Beyond RBAC</title>
			<pubDate><![CDATA[Wed, 23 Sep 2026 15:55:28 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/harden-keycloak-claude-code-cursor/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/harden-keycloak-claude-code-cursor/]]></link>
			<title>Harden Keycloak with Claude Code and Cursor: An AI-Assisted Security Review Playbook</title>
			<pubDate><![CDATA[Wed, 23 Sep 2026 14:00:00 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/cve-2026-95503-keycloak-kerberos-kdc-spoofing-spnego/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/cve-2026-95503-keycloak-kerberos-kdc-spoofing-spnego/]]></link>
			<title>CVE-2026-95503: Keycloak Kerberos Does Not Verify the KDC</title>
			<pubDate><![CDATA[Wed, 23 Sep 2026 13:00:00 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/resource-access-certifications-ai-agents-keycloak/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/resource-access-certifications-ai-agents-keycloak/]]></link>
			<title>Resource Access Certifications for AI Agents vs Keycloak</title>
			<pubDate><![CDATA[Wed, 23 Sep 2026 13:00:00 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/vendor-risk-brief-for-cto/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/vendor-risk-brief-for-cto/]]></link>
			<title>The Vendor Risk Brief Your CTO Needs to See</title>
			<pubDate><![CDATA[Wed, 23 Sep 2026 13:00:00 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/secure-your-app-with-ai-iam-limits/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/secure-your-app-with-ai-iam-limits/]]></link>
			<title>Secure Your App with AI: What AI AppSec Can and Cannot Replace in IAM</title>
			<pubDate><![CDATA[Wed, 23 Sep 2026 13:00:00 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/keycloak-token-expired-troubleshooting/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/keycloak-token-expired-troubleshooting/]]></link>
			<title>Keycloak Token Expired: Understanding and Fixing Token Issues</title>
			<pubDate><![CDATA[Wed, 23 Sep 2026 00:57:56 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/trust/]]></guid>
			<link><![CDATA[https://skycloak.io/trust/]]></link>
			<title>Procurement Checklist</title>
			<pubDate><![CDATA[Tue, 22 Sep 2026 23:18:14 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/brief/]]></guid>
			<link><![CDATA[https://skycloak.io/brief/]]></link>
			<title>Skycloak Business Case</title>
			<pubDate><![CDATA[Tue, 22 Sep 2026 23:18:13 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/for-leaders/]]></guid>
			<link><![CDATA[https://skycloak.io/for-leaders/]]></link>
			<title>Skycloak for Engineering Leaders</title>
			<pubDate><![CDATA[Tue, 22 Sep 2026 23:18:12 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/]]></guid>
			<link><![CDATA[https://skycloak.io/]]></link>
			<title>Identity Management Simplified</title>
			<pubDate><![CDATA[Wed, 01 Jan 2025 01:25:12 +0000]]></pubDate>
		</item>
					<item>
			<guid><![CDATA[https://skycloak.io/blog/]]></guid>
			<link><![CDATA[https://skycloak.io/blog/]]></link>
			<title>Explore Insights on Identity and Access Management (IAM)</title>
			<pubDate><![CDATA[Sun, 15 Dec 2024 21:40:40 +0000]]></pubDate>
		</item>
				</channel>
</rss>
