Tag: #keycloak
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 29 posts
Keycloak HA on Kubernetes — Infinispan Clustering and Zero-Downtime Deployments
A hands-on guide to running Keycloak with high availability on Kubernetes. We compare the Operator and Helm, walk through Infinispan caches and JGroups DNSPING, persistent user sessions, the 26.6 zero-downtime rolling pa
2026-06-12 · 13 min read #keycloak#kubernetes#infinispan#ha#devopsMastering JWT Security — Signature Verification, Key Rotation, and Common Vulnerabilities
We dissect the structure of JWT, JWS, and JWE and cover real-world vulnerabilities such as alg confusion attacks and kid injection, along with their defenses. From JWKS-based key rotation and algorithm selection includin
2026-06-12 · 16 min read #jwt#security#oidc#keycloak#cryptographyKeycloak Authorization Services — Fine-Grained Access Control with UMA 2.0
A deep dive into Keycloak Authorization Services that goes beyond the limits of RBAC. Covers the resource/scope/policy/permission model, the UMA 2.0 grant flow, policy enforcer configuration, decision strategies, and how
2026-06-12 · 16 min read #keycloak#authorization#uma#oauth2#security2026 IAM Trends — AI Agent Identity, MCP Authentication, Verifiable Credentials
The 2026 IAM landscape is being reshaped by passwordless-by-default, an explosion of non-human identities in the form of AI agents, and the OAuth 2.1-based standardization of MCP authorization. From on-behalf-of delegati
2026-06-12 · 16 min read #iam#oauth2#mcp#ai-agent#keycloakSSO and Identity Providers in 2026 - A Deep Dive into Keycloak 26, Authentik, Authelia, Auth0, Okta, AWS Cognito, and Microsoft Entra ID
A full survey of the SSO and Identity Provider landscape in 2026. Standards (OAuth 2.1, OIDC, SAML, SCIM, WebAuthn), open-source IdPs (Keycloak 26, Authentik, Authelia, Casdoor), managed SaaS (Auth0, Okta, AWS Cognito, M
2026-05-16 · 24 min read #sso#iam#keycloak#authentik#autheliaKeycloak vs Authentik vs Zitadel vs Ory Hydra vs Auth0 vs WorkOS vs Okta — 2026 SSO / OIDC / SAML / OAuth 2.1 / FAPI 2.0 / FedCM Deep Dive
In 2026, OAuth 2.1 became an RFC, FAPI 2.0 went final and reached financial-services production, and Chrome and Edge shipped FedCM by default. Passkeys are no longer novel. This piece compares Keycloak 25, Authentik, Zit
2026-05-16 · 21 min read #keycloak#authentik#zitadel#ory-hydra#auth0Keycloak Integration Hands-On — Run It with Docker, Configure Realm/Client, Wire Up Spring Boot and Next.js (2025 Hands-On Guide)
Don't build authentication yourself — use Keycloak. This is a follow-along hands-on: run Keycloak 26 with Docker, configure Realm/Client/User/Role, poke the OIDC endpoints with curl, and integrate a Spring Boot Resource
2026-05-14 · 23 min read #keycloak#oidc#oauth2#authentication#authorization[DevOps] SSO Server Mocking Guide: Building OAuth2/OIDC Test Environments
A comprehensive guide to mocking SSO (Single Sign-On) servers. Covers OIDC Provider simulation with WireMock, Keycloak test containers, and mock-oauth2-server usage.
2026-03-20 · 11 min read #devops#sso#oauth2#oidc#mockingThe Definitive Guide to Next-Generation Digital Identity, SSO, and Keycloak in Practice
Compare SSO architectures and SAML/OAuth2/OIDC standards, then dive into Keycloak production deployment, authentication flows, RBAC/ABAC authorization, LDAP integration, Spring Boot/Next.js integration, and high availabi
2026-03-01 · 12 min read #keycloak#iam#sso#oauth2#oidc