lucas-magalhaes1/keycloak

v1.0.3Apache-2.0

Generic, secure, idempotent and auditable Keycloak administration — discover capabilities and permissions, plan and reconcile realms, clients, scopes, mappers, federation, IdPs, flows, roles, groups, Organizations, snapshots and sanitized/encrypted artifacts via Admin REST API.

GitHub Open Website

skills

saas-authorization

Design multi-tenant SaaS authorization separate from Keycloak authentication. Use when users, tenants, partners, and customers need resource-scoped delegated permissions.

Version: 1.0.0
License: Apache-2.0
Compatibility: Any SaaS API with Keycloak-issued JWTs; Keycloak 26+ Organizations is optional

Read SKILL.md at the source

Pinned to revision 48e99e741106, so it is the text this page describes rather than whatever the author pushed since.

Files

skills/saas-authorization/SKILL.md
skills/saas-authorization/references/authorization-pipeline.md
skills/saas-authorization/references/jwt-claims-mapping.md
skills/saas-authorization/references/relationship-model.md
skills/saas-authorization/references/tenant-model.md

Every link opens the file at its source, pinned to the revision this page describes.