Single Sign On
-
Keycloak Behind a Reverse Proxy: Fix 403 and Hostname Errors
Why Keycloak returns 403 behind a proxy, rejects redirect URIs, and issues tokens with the wrong issuer, and the exact options that resolve each case.
-
Keycloak vs authentik vs Authelia: What to Self-Host
A protocol, architecture and footprint comparison of three self-hosted identity servers, and the deployment shapes each one is actually built for.
-
Keycloak Realms Explained: Clients, Roles and Tokens
What a Keycloak realm isolates, when to use one or several realms, and how clients, roles, scopes, sessions and tokens fit together.