par Loïc Mercier Des Rochettes | Oct 18, 2026 | Gestion des Identités, Open Source, Provisioning, Sécurité, SSO
Four years after our Keycloak.X on Kubernetes article, the state of the art has changed completely. Keycloak has an official operator, PostgreSQL has a mature one, and the Gateway API is taking over from Ingress. This article deploys a typical Keycloak platform on...
par Loïc Mercier Des Rochettes | Oct 11, 2026 | Gestion des Identités, Open Source, SSO
Mandatory MFA without forcing personal phones with Keycloak: your security team wants every employee on multi-factor authentication. Most employees will happily install an authenticator app on their phone. A few will refuse, and they are within their rights: an...
par Loïc Mercier Des Rochettes | Mar 6, 2026 | Gestion des Identités
How to get self-locking sessions in Keycloak with PIN step-up authentication : with our partner Please-Open It with share with you this article. Have you ever wished your Keycloak sessions could lock themselves after a few minutes of inactivity on sensitive features —...
par Loïc Mercier Des Rochettes | Fév 13, 2026 | Cloud, Communauté, Gestion des Identités
European laws and american laws are conflicting in a way that makes practically illegal for european companies to use american services to store sensitive data. Europe seems to put the rights of the individuals as the core principle behind its laws whereas the United...
par Loïc Mercier Des Rochettes | Juin 5, 2025 | Communauté, Gestion des Identités, SSO
Keycloak User Agent Filter Authenticator: our main partner, Please Open It, created an authenticator that filters the user-agent header for Keycloak to exclude embedded webviews, ensuring compliance with specification requirements. The component reduces the attack...