keycloak

Manage Keycloak realms, clients, authentication flows, and user federation.

18|2|Updated Dec 12, 2025
One-click install
npx skills add https://github.com/markus41/claude --skill keycloak-markus41
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: keycloak
Source: https://github.com/markus41/claude/tree/main/.claude/skills/keycloak
Command: npx skills add https://github.com/markus41/claude --skill keycloak-markus41

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the management of Keycloak, an open-source identity and access management solution, simplifying complex configurations for realms, clients, and users.

Core Features & Use Cases

  • Realm Configuration: Define and manage identity realms, including security policies and user attributes.
  • Client Management: Set up and configure clients for applications (web, mobile, services) using OIDC and SAML.
  • Authentication Flows: Design and implement multi-factor authentication (MFA) and custom login flows.
  • User Federation: Integrate with external identity providers like LDAP and Active Directory.
  • Use Case: Configure a new OIDC client for a Single Page Application (SPA) that requires PKCE and specific redirect URIs.

Quick Start

Use the keycloak skill to export the 'alpha-members' realm configuration to a file.

Frequently Asked Questions about keycloak

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure a new OIDC client for a Single Page Application in Keycloak?

To configure a Keycloak OIDC client for a Single Page Application, you define the client settings, enable PKCE, and specify the exact redirect URIs to secure authentication.

Can I integrate LDAP or Active Directory for user federation in Keycloak?

Yes, Keycloak user federation allows you to integrate external identity providers like LDAP and Active Directory to centralize authentication and authorization.

How do I design custom authentication flows for multi-factor authentication?

Designing Keycloak authentication flows involves mapping custom login steps and multi-factor authentication requirements within the realm's security policies.

Does this approach support both SAML and OIDC for single sign-on?

Yes, Keycloak identity and access management supports both SAML and OIDC protocols to facilitate secure single sign-on across web, mobile, and service clients.

What is the best way to export realm configurations for backup or migration?

The best way to export Keycloak realm configurations is by utilizing the administrative REST API or command-line interface to output identity and access settings to a file.

Do I need detailed knowledge of the administrative REST API to manage realms?

Yes, operational tasks for managing Keycloak realms, clients, and themes require a detailed understanding of the administrative REST API and command-line interface.