Mushfika Faria Nova·2d agoLoad-Testing Keycloak for a Million-User Bank: Argon2id and Little’s LawOur first load test was so slow that we blamed our own code. Then our dashboard said 53 requests were in progress when it should have been…
Ludovic Fernandez·Oct 29Bounded Delegation for AI Agents: From Kubernetes to MCPAt Alien6, based in the Paris region, France, we investigated these properties to address a problem in agentic architecture: when one agent…
Engin Yoruker·Oct 28Per-Group Tool Access for MCP with Keycloak and Agent Gateway on RedHat OpenShiftIn Part…
InDevOps.devbyScaibu·Oct 27Identity and Access Management ArchitectureA Practical Guide to Authentication, Authorization, Single Sign-On, and Identity Federation
Babayevqocheli·Oct 26Keycloak in Production: Docker, LDAP/AD, Legacy MSSQL Users and Kerberos SSOOct 26, 2026 · @Qocali
Mushfika Faria Nova·Oct 26Zero-Reset Keycloak Migration for a Million-User Bank: SPIs and Argon2idYou can’t turn a bcrypt hash into Argon2id without the password. So we waited for every user to bring theirs, and moved them one login at a…
InTowards AIbyYogender Pal·Oct 25Seuring AI Applications with Keycloak and Envoy Gateway in KubernetesAI applications need more than a connection to a large language model. When multiple users interact with an AI service, the application…
Oscar van der Leij·Oct 21Token Exchange at the API Gateway: RFC 8693 in PracticeAt a company I worked for in the past, our APIs sat behind an API gateway and the identity provider was Keycloak, and the question that…
Florian Röser·Oct 20OAuth Hardening Your Spring Boot Login: PKCE, Logout and CSRFSpring Boot 4 turns on state, nonce and PKCE for you. Here’s what your login still leaves open, and what to check in older Boot 3 apps.
Ismail ZAHIR·Oct 19What Contributing to Two Keycloak Projects Taught Me About Building Authentication ExtensionsLessons from a missing login option, repeated enrollment, and a dependency that never made it into the released JAR.
