Tag: #iam

← All posts

• Keycloak 26.7 — SCIM Promoted to Preview, Multi-Cluster v2 Without External Infinispan, and What to Watch in the Upgrade

  Keycloak 26.7.0, released on July 9, 2026, promoted the SCIM API — a request that had been open for nearly four years — to preview, and shipped multi-cluster v2 in preview, which builds multi-cluster HA out of the databa

  2026-07-17 · 16 min read #security#keycloak#sso#iam#scim

• From SiteMinder to Keycloak — A Legacy SSO Migration Strategy and Practical Roadmap

  A practical roadmap for migrating a SiteMinder estate to Keycloak: application inventory classification, an object mapping table, SAML brokering coexistence architecture, oauth2-proxy header translation, gradual password

  2026-06-12 · 16 min read #keycloak#siteminder#sso#iam#migration

• SCIM 2.0 Deep Dive — The Standard for Automated User Provisioning

  SSO alone cannot manage the account lifecycle. This post takes a practitioner-level deep dive into SCIM 2.0: the spec structure (RFC 7642/7643/7644), User/Group schemas, REST endpoints and PATCH semantics, support in Okt

  2026-06-12 · 18 min read #scim#iam#provisioning#sso#security

• OpenID Connect Deep Dive — From the Authorization Code Flow to Discovery

  A protocol-level dissection of how OIDC stacks an authentication layer on top of OAuth 2.0: the role differences between ID Token, Access Token, and Refresh Token, and the detailed Authorization Code + PKCE flow with rea

  2026-06-12 · 14 min read #oidc#oauth2#jwt#sso#security

• SSO Fundamentals — SAML vs OAuth 2.0 vs OIDC, What to Use and When

  A complete walkthrough of how SSO works (IdP/SP/RP), sessions vs tokens, and the history and role differences of SAML, OAuth 2.0, and OIDC. Includes a protocol decision tree, comparison tables, and real authentication fl

  2026-06-12 · 18 min read #sso#saml#oauth2#oidc#iam

• Dissecting Symantec SiteMinder Architecture — The Standard of Legacy Enterprise WebSSO

  A deep dive into SiteMinder, the product that dominated enterprise WebSSO for over two decades. We dissect the Policy Server, Web Agent, SMSESSION cookie, the realm/rule/policy object model, and the security implications

  2026-06-12 · 17 min read #siteminder#sso#iam#security#websso

• Designing the Coexistence of Legacy WebSSO and Modern IAM — Architecture Patterns for the Hybrid Transition Era

  The transition from legacy WebSSO to modern IAM lasts for years. We organize four coexistence patterns — protocol bridges, reverse-proxy header injection, identity orchestration, and the strangler fig — along with sessio

  2026-06-12 · 18 min read #iam#sso#keycloak#siteminder#architecture

• SAML 2.0 Deep Dive — Mastering Assertions, Bindings, and Metadata

  A dissection of SAML 2.0 with real XML examples: the structure of the Assertion at its heart, the AuthnRequest/Response flow, SP-initiated vs IdP-initiated SSO, HTTP-Redirect/POST/Artifact bindings, metadata exchange, an

  2026-06-12 · 13 min read #saml#sso#xml#security#iam

• 2026 IAM Trends — AI Agent Identity, MCP Authentication, Verifiable Credentials

  The 2026 IAM landscape is being reshaped by passwordless-by-default, an explosion of non-human identities in the form of AI agents, and the OAuth 2.1-based standardization of MCP authorization. From on-behalf-of delegati

  2026-06-12 · 16 min read #iam#oauth2#mcp#ai-agent#keycloak

• SSO and Identity Providers in 2026 - A Deep Dive into Keycloak 26, Authentik, Authelia, Auth0, Okta, AWS Cognito, and Microsoft Entra ID ♪ Listenable

  A full survey of the SSO and Identity Provider landscape in 2026. Standards (OAuth 2.1, OIDC, SAML, SCIM, WebAuthn), open-source IdPs (Keycloak 26, Authentik, Authelia, Casdoor), managed SaaS (Auth0, Okta, AWS Cognito, M

  2026-05-16 · 24 min read #sso#iam#keycloak#authentik#authelia

• Keycloak Integration Hands-On — Run It with Docker, Configure Realm/Client, Wire Up Spring Boot and Next.js (2025 Hands-On Guide) ♪ Listenable

  Don't build authentication yourself — use Keycloak. This is a follow-along hands-on: run Keycloak 26 with Docker, configure Realm/Client/User/Role, poke the OIDC endpoints with curl, and integrate a Spring Boot Resource

  2026-05-14 · 23 min read #keycloak#oidc#oauth2#authentication#authorization

• AWS Core Services Complete Guide 2025: EC2, S3, RDS, Lambda, VPC, IAM Deep Dive

  Everything about AWS core services! EC2 (instances/Auto Scaling), S3 (storage classes/lifecycle), RDS (Multi-AZ/Read Replicas), Lambda (serverless), VPC (network design), IAM (security), CloudFront (CDN), DynamoDB (NoSQL

  2026-03-25 · 22 min read #aws#ec2#s3#rds#lambda

• AWS Security Specialty (SCS-C02) Practice Exam — 65 Questions ♪ Listenable

  AWS Security Specialty SCS-C02 practice exam with 65 questions covering threat detection, security logging, infrastructure security, IAM, data protection, and governance domains.

  2026-03-17 · 37 min read #aws#scs-c02#aws-security#aws-certification#security-specialist

• The Definitive Guide to Next-Generation Digital Identity, SSO, and Keycloak in Practice

  Compare SSO architectures and SAML/OAuth2/OIDC standards, then dive into Keycloak production deployment, authentication flows, RBAC/ABAC authorization, LDAP integration, Spring Boot/Next.js integration, and high availabi

  2026-03-01 · 12 min read #keycloak#iam#sso#oauth2#oidc