Tag: #iam
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 14 posts
Keycloak 26.7 — SCIM Promoted to Preview, Multi-Cluster v2 Without External Infinispan, and What to Watch in the Upgrade
Keycloak 26.7.0, released on July 9, 2026, promoted the SCIM API — a request that had been open for nearly four years — to preview, and shipped multi-cluster v2 in preview, which builds multi-cluster HA out of the databa
2026-07-17 · 16 min read #security#keycloak#sso#iam#scimFrom SiteMinder to Keycloak — A Legacy SSO Migration Strategy and Practical Roadmap
A practical roadmap for migrating a SiteMinder estate to Keycloak: application inventory classification, an object mapping table, SAML brokering coexistence architecture, oauth2-proxy header translation, gradual password
2026-06-12 · 16 min read #keycloak#siteminder#sso#iam#migrationSCIM 2.0 Deep Dive — The Standard for Automated User Provisioning
SSO alone cannot manage the account lifecycle. This post takes a practitioner-level deep dive into SCIM 2.0: the spec structure (RFC 7642/7643/7644), User/Group schemas, REST endpoints and PATCH semantics, support in Okt
2026-06-12 · 18 min read #scim#iam#provisioning#sso#securityOpenID Connect Deep Dive — From the Authorization Code Flow to Discovery
A protocol-level dissection of how OIDC stacks an authentication layer on top of OAuth 2.0: the role differences between ID Token, Access Token, and Refresh Token, and the detailed Authorization Code + PKCE flow with rea
2026-06-12 · 14 min read #oidc#oauth2#jwt#sso#securitySSO Fundamentals — SAML vs OAuth 2.0 vs OIDC, What to Use and When
A complete walkthrough of how SSO works (IdP/SP/RP), sessions vs tokens, and the history and role differences of SAML, OAuth 2.0, and OIDC. Includes a protocol decision tree, comparison tables, and real authentication fl
2026-06-12 · 18 min read #sso#saml#oauth2#oidc#iamDissecting Symantec SiteMinder Architecture — The Standard of Legacy Enterprise WebSSO
A deep dive into SiteMinder, the product that dominated enterprise WebSSO for over two decades. We dissect the Policy Server, Web Agent, SMSESSION cookie, the realm/rule/policy object model, and the security implications
2026-06-12 · 17 min read #siteminder#sso#iam#security#webssoDesigning the Coexistence of Legacy WebSSO and Modern IAM — Architecture Patterns for the Hybrid Transition Era
The transition from legacy WebSSO to modern IAM lasts for years. We organize four coexistence patterns — protocol bridges, reverse-proxy header injection, identity orchestration, and the strangler fig — along with sessio
2026-06-12 · 18 min read #iam#sso#keycloak#siteminder#architectureSAML 2.0 Deep Dive — Mastering Assertions, Bindings, and Metadata
A dissection of SAML 2.0 with real XML examples: the structure of the Assertion at its heart, the AuthnRequest/Response flow, SP-initiated vs IdP-initiated SSO, HTTP-Redirect/POST/Artifact bindings, metadata exchange, an
2026-06-12 · 13 min read #saml#sso#xml#security#iam2026 IAM Trends — AI Agent Identity, MCP Authentication, Verifiable Credentials
The 2026 IAM landscape is being reshaped by passwordless-by-default, an explosion of non-human identities in the form of AI agents, and the OAuth 2.1-based standardization of MCP authorization. From on-behalf-of delegati
2026-06-12 · 16 min read #iam#oauth2#mcp#ai-agent#keycloakSSO and Identity Providers in 2026 - A Deep Dive into Keycloak 26, Authentik, Authelia, Auth0, Okta, AWS Cognito, and Microsoft Entra ID
A full survey of the SSO and Identity Provider landscape in 2026. Standards (OAuth 2.1, OIDC, SAML, SCIM, WebAuthn), open-source IdPs (Keycloak 26, Authentik, Authelia, Casdoor), managed SaaS (Auth0, Okta, AWS Cognito, M
2026-05-16 · 24 min read #sso#iam#keycloak#authentik#autheliaKeycloak Integration Hands-On — Run It with Docker, Configure Realm/Client, Wire Up Spring Boot and Next.js (2025 Hands-On Guide)
Don't build authentication yourself — use Keycloak. This is a follow-along hands-on: run Keycloak 26 with Docker, configure Realm/Client/User/Role, poke the OIDC endpoints with curl, and integrate a Spring Boot Resource
2026-05-14 · 23 min read #keycloak#oidc#oauth2#authentication#authorizationAWS Core Services Complete Guide 2025: EC2, S3, RDS, Lambda, VPC, IAM Deep Dive
Everything about AWS core services! EC2 (instances/Auto Scaling), S3 (storage classes/lifecycle), RDS (Multi-AZ/Read Replicas), Lambda (serverless), VPC (network design), IAM (security), CloudFront (CDN), DynamoDB (NoSQL
2026-03-25 · 22 min read #aws#ec2#s3#rds#lambdaAWS Security Specialty (SCS-C02) Practice Exam — 65 Questions
AWS Security Specialty SCS-C02 practice exam with 65 questions covering threat detection, security logging, infrastructure security, IAM, data protection, and governance domains.
2026-03-17 · 37 min read #aws#scs-c02#aws-security#aws-certification#security-specialistThe Definitive Guide to Next-Generation Digital Identity, SSO, and Keycloak in Practice
Compare SSO architectures and SAML/OAuth2/OIDC standards, then dive into Keycloak production deployment, authentication flows, RBAC/ABAC authorization, LDAP integration, Spring Boot/Next.js integration, and high availabi
2026-03-01 · 12 min read #keycloak#iam#sso#oauth2#oidc