Configure Keycloak realms, clients, and authentication flows.
npx skills add https://github.com/Lobbi-Docs/claude --skill keycloak
Please help me install this Agent Skill. Skill: keycloak Source: https://github.com/Lobbi-Docs/claude/tree/main/.claude/skills/keycloak Command: npx skills add https://github.com/Lobbi-Docs/claude --skill keycloak
This Skill streamlines the configuration and management of Keycloak, an open-source identity and access management solution, helping you secure applications with robust authentication, authorization, and user federation.
Use the keycloak skill to create a new public client named 'my-spa-app' in the 'alpha-members' realm with redirect URI 'http://localhost:3000/*'.
High-intent search queries and answers about installing and using this skill.
Authentication and authorization are managed through Keycloak by configuring realms, clients, and roles. Create a realm for your environment, register your application as a client with appropriate redirect URIs, define roles, and configure authentication flows—including optional MFA, OTP, or social login—to secure user access across development and production.
Yes, Keycloak supports user federation through LDAP and Active Directory integration. Configure a user federation provider in your realm to connect external directories, allowing Keycloak to authenticate users stored in those systems while maintaining centralized access management.
Single sign-on is enabled by configuring multiple clients within the same Keycloak realm and setting up OIDC or SAML identity providers. Users authenticate once to Keycloak and gain access to all registered applications without re-entering credentials, with token lifetimes and scopes controlling session behavior.
Keycloak supports multi-factor authentication through OTP, WebAuthn, and custom authentication flows. You can also configure social login providers and SAML or OIDC identity providers to enable diverse authentication methods tailored to your security requirements.
Yes, Keycloak includes PKCE support for public clients, brute force protection against credential attacks, audit logging for compliance and forensics, and configurable token lifetimes. These features address common security requirements for both development and production environments.
Theme customization allows you to modify Keycloak's login, account management, and email pages to match your application branding. Themes control HTML, CSS, and message templates while preserving underlying authentication functionality.
wilfriedagoConfigure Keycloak realms, clients, and authentication flows for SSO.
Lobbi-DocsConfigure Keycloak realms, clients, and authentication flows.
MassimilianoPiliImplement OAuth2 Proxy dual-instance deployment with Keycloak OIDC and nginx auth_request.
aviskaarDesign IAM architectures with RBAC, ABAC, PAM, and lifecycle management.
