Keycloak

Configure Keycloak realms, clients, and authentication flows for SSO.

Updated Apr 1, 2026
One-click install
npx skills add https://github.com/moonshineTP/ATTT-20252 --skill keycloak-moonshinetp
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Keycloak
Source: https://github.com/moonshineTP/ATTT-20252/tree/main/.claude/skills/keycloak
Command: npx skills add https://github.com/moonshineTP/ATTT-20252 --skill keycloak-moonshinetp

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires docker, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides expert guidance for Keycloak identity and access management, addressing realm configuration, client setup, user federation, authentication flows, and integration with applications.

Core Features & Use Cases

  • Realm Configuration: Create and configure realms for SSO, user federation, and role-based access control.
  • Client Setup: Configure clients for authentication, authorization, and token management.
  • User Federation: Integrate with external identity providers like LDAP, Active Directory, and SAML.
  • Authentication Flows: Customize authentication flows for different use cases.
  • Token Configuration: Manage access and refresh tokens with configurable lifespans and reuse policies.
  • Application Integration: Integrate Keycloak with various applications using standard protocols like OAuth 2.0, OpenID Connect, and SAML.

Quick Start

Set up Keycloak using Docker and configure a client for OpenID Connect with the following command: docker run -d --name keycloak -p 8080:8080 quay.io/keycloak/keycloak:latest start-dev

Frequently Asked Questions about Keycloak

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure Keycloak for single sign-on and user federation?

Keycloak single sign-on and user federation are configured by creating a realm, setting up clients for authentication, and connecting external identity providers like LDAP or Active Directory to centralize identity management.

Does Keycloak support OpenID Connect and SAML for application integration?

Yes, Keycloak supports OpenID Connect and SAML protocols to integrate applications, handling authentication flows, token management, and identity brokering across different platforms for secure access control.

How do I set up Keycloak using Docker for identity and access management?

You can set up Keycloak using Docker by running the command `docker run -d --name keycloak -p 8080:8080 quay.io/keycloak/keycloak:latest start-dev` to deploy the server and access the admin console for configuration.

Can I customize authentication flows and manage access tokens in Keycloak?

Yes, Keycloak allows you to customize authentication flows for specific use cases and manage access and refresh tokens with configurable lifespans and reuse policies to maintain secure role-based access control.

What is the best way to integrate Keycloak with LDAP and Active Directory?

The best way to integrate Keycloak with LDAP and Active Directory is through user federation, which allows the identity and access management server to authenticate users against existing external identity providers seamlessly.