0 views
Read
#0
Learn Keycloak - Pre-Requisites & Setup Environment
Setting up the foundations for learning Keycloak: the essential skills you must master, the software and hardware required, the realm concept, and running Keycloak with Docker to start experimenting on localhost.
August 3, 2026
00
Read
#1
Learn Keycloak - History, Background & Why You Need SSO
Understanding why SSO is needed: the problem of password fatigue and the security risks of traditional authentication, the evolution of authentication from basic to modern protocols, and the benefits and challenges of Single Sign-On.
August 3, 2026
00
Read
#2
Learn Keycloak - Identity Protocol Overview: OAuth2, OIDC, SAML, SCIM
Getting to know the four main identity protocols: OAuth 2.0 for authorization, OpenID Connect for authentication, SAML 2.0 for enterprise legacy, and SCIM 2.0 for provisioning, complete with Keycloak support.
August 3, 2026
00
Read
#3
Learn Keycloak - Architecture & Core Concepts
Unpacking the Keycloak architecture: core concepts like realm, client, user, role, and group, the authentication server components, admin console, database, as well as the various authentication flows and token types.
August 3, 2026
00
Read
#4
Learn Keycloak - OAuth 2.0 Fundamentals
Going deep into OAuth 2.0: the four main roles of resource owner, client, authorization server, and resource server, the endpoint and token components, and all the grant types with when to use them.
August 3, 2026
00
Read
#5
Learn Keycloak - Authorization Code Flow
Breaking down the Authorization Code flow step by step: authorization request, login and consent, the code, token exchange, using the access token, and the PKCE extension for added security.
August 3, 2026
00
Read
#6
Learn Keycloak - Client Credentials Flow
Learning the client credentials flow for machine-to-machine communication: recognizing when this flow fits, preparing a confidential client, using service accounts and client roles, and integrating it with backend APIs without user presence.
August 3, 2026
00
Read
#7
Learn Keycloak - Refresh Tokens & Token Management
Managing the token lifecycle in Keycloak: understanding the role of the refresh token, rotation and offline access mechanisms, token and session lifetime configuration, and the security steps for detecting token theft.
August 3, 2026
00
Read
#8
Learn Keycloak - OAuth 2.0 Scopes & Consent
Understanding the role of scopes in OAuth 2.0 and Keycloak: standard and custom scopes, default vs optional client scopes, the consent screen flow, and best practices for applying the principle of least privilege in applications.
August 3, 2026
00
Read
#9
Learn Keycloak - OpenID Connect Fundamentals
Getting to know OpenID Connect as an identity layer on top of OAuth 2.0: the structure of the ID token as a JWT, standard claims, the main OIDC flows, the UserInfo endpoint, and configuration discovery via well-known and JWKS.
August 3, 2026
00