lucas-magalhaes1/keycloak
Comprehensive Keycloak identity and access management — manage realms, clients, users, roles, identity providers, organizations, authentication flows, protocol mappers, and debug JWT tokens via Admin REST API. Includes multi-tenant SaaS authorization patterns.
Administer the Keycloak Admin REST API with safe, auditable operations. Use when you need to inspect or change realms, clients, users, roles, groups, IdPs, Organizations, or flows.
Configure authentication flows, required actions, and MFA in Keycloak. Use when you need to review login, OTP, WebAuthn, or custom flows.
Integrate external identity providers into Keycloak with OIDC or SAML. Use when you need to federate Google, Entra ID, Okta, or a corporate IdP.
Implement B2B multi-tenancy with Keycloak 26+ Organizations. Use when a SaaS product needs to group members, domains, and IdPs of customer companies.
Design Keycloak protocol mappers for useful and minimal JWT and SAML claims. Use when an application needs to receive attributes, groups, audiences, or tenant context.
Design multi-tenant SaaS authorization separate from Keycloak authentication. Use when users, tenants, partners, and customers need resource-scoped delegated permissions.
Configure Keycloak OIDC and SAML clients with secure grants and URIs. Use when you are integrating an SPA, backend, mobile app, or service-to-service workload.
Configure a secure Keycloak realm for internal or SaaS applications. Use when you need to create the identity boundary for a new platform.
Debug JWTs issued by Keycloak without sending credentials to external services. Use when an API does not recognize the expected issuer, audience, roles, or claims.
Diagnose Keycloak, session, token, client, and identity provider errors. Use when login, authorization, CORS, or federation is failing.
Plan LDAP and Active Directory user federation in Keycloak. Use when corporate identities need to authenticate without an immediate credential migration.