Keycloak Architecture: Realms, Clients, and the Data Model
Explore the core components of Keycloak architecture, including realms, clients, and the data model, tailored for platform and identity engineers.
Part 1 · Keycloak in ProductionTag
Production Keycloak — clustering, theming, user federation, custom SPIs, performance tuning, and advanced Spring Boot integration.
34 posts · page 1 of 2
Explore the core components of Keycloak architecture, including realms, clients, and the data model, tailored for platform and identity engineers.
Part 1 · Keycloak in ProductionLearn how to deploy Keycloak securely in production using Docker and Kubernetes, including SSL configuration and monitoring strategies.
Part 2 · Keycloak Masterclass SeriesLearn to secure OIDC flows with effective multi-factor authentication strategies including WebAuthn, TOTP, and dynamic step-up challenges using ACR.
Part 7 · OpenID Connect Deep Dive SeriesThis guide covers setting up identity-aware load balancing with NGINX and Keycloak, focusing on JWT handling and secure authentication routing.
Part 2 · Identity Gateways & Legacy IntegrationLearn how to set up passkey authentication in Keycloak using WebAuthn and FIDO2 protocols to replace traditional passwords with secure, passwordless login methods.
Learn how to build a secure self-service password reset mechanism with Spring Boot and Keycloak, covering required actions and identity management.
Learn how to implement enterprise SSO solutions using Azure AD, Okta, and Keycloak to streamline identity management across your organization.
Part 7 · Identity Platform ArchitectureLearn how to build adaptive authentication flows with Keycloak and Spring Boot. This guide covers risk scoring, step-up auth, and custom authentication implementation.
Learn how to automate access certification processes with Keycloak and Spring Boot for better compliance and identity governance.
Learn how to apply chaos engineering principles to IAM systems. This guide covers failure injection, Keycloak chaos testing, and strategies for SRE identity resilience.
Learn how to implement just-in-time provisioning workflows leveraging SAML, OIDC, and SCIM to automate user creation and synchronization across platforms.
Part 1 · Identity & Access Management SeriesExplore how RFC 8693 standardizes token exchange for delegation and impersonation scenarios in Keycloak environments.
Part 7 · OAuth 2.0 RFCs Every Engineer Should ReadLearn how to build a self-service identity portal leveraging Spring Boot and Keycloak for secure identity management and API access control.
Explore how identity provider bridging translates SAML assertions into OIDC tokens, facilitating integration between disparate authentication protocols using brokers like Keycloak.
Part 3 · Identity Platform ArchitectureLearn how to secure your Keycloak deployment with production-grade hardening techniques, including brute force protection and CSP configuration.
Part 1 · Zero Trust & Modern Security Architecture SeriesThis guide covers building custom providers within Keycloak using the SPI architecture to extend functionality and create effective plugins.
Part 15 · Keycloak Masterclass SeriesLearn how to implement multi-tenant identity management using Keycloak Organizations, covering B2B workflows and organization structures.
Part 14 · Keycloak Masterclass SeriesExplore how JDBC_PING and DNS_PING cache strategies impact Keycloak benchmark results and overall system performance.
Part 13 · Keycloak Masterclass SeriesLearn how to programmatically manage Keycloak realms and users using the Keycloak REST API for efficient automation.
Part 12 · Keycloak Masterclass SeriesExplore essential lessons learned when migrating from ForgeRock to Keycloak. This walkthrough covers identity migration strategies and platform adoption tips.
Part 11 · Keycloak Masterclass Series