keycloak

Manage Keycloak realms, clients, authentication flows, and user federation.

18|2|Updated Dec 12, 2025
One-click install
npx skills add https://github.com/markus41/claude --skill keycloak-markus41
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: keycloak
Source: https://github.com/markus41/claude/tree/main/.claude/skills/keycloak
Command: npx skills add https://github.com/markus41/claude --skill keycloak-markus41

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the management of Keycloak, an open-source identity and access management solution, simplifying complex configurations for realms, clients, and users.

Core Features & Use Cases

  • Realm Configuration: Define and manage identity realms, including security policies and user attributes.
  • Client Management: Set up and configure clients for applications (web, mobile, services) using OIDC and SAML.
  • Authentication Flows: Design and implement multi-factor authentication (MFA) and custom login flows.
  • User Federation: Integrate with external identity providers like LDAP and Active Directory.
  • Use Case: Configure a new OIDC client for a Single Page Application (SPA) that requires PKCE and specific redirect URIs.

Quick Start

Use the keycloak skill to export the 'alpha-members' realm configuration to a file.

Frequently Asked Questions about keycloak

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure a new OIDC client for a Single Page Application in Keycloak?▼

To configure a Keycloak OIDC client for a Single Page Application, you define the client settings, enable PKCE, and specify the exact redirect URIs to secure authentication.

Can I integrate LDAP or Active Directory for user federation in Keycloak?▼

Yes, Keycloak user federation allows you to integrate external identity providers like LDAP and Active Directory to centralize authentication and authorization.

How do I design custom authentication flows for multi-factor authentication?▼

Designing Keycloak authentication flows involves mapping custom login steps and multi-factor authentication requirements within the realm's security policies.

Does this approach support both SAML and OIDC for single sign-on?▼

Yes, Keycloak identity and access management supports both SAML and OIDC protocols to facilitate secure single sign-on across web, mobile, and service clients.

What is the best way to export realm configurations for backup or migration?▼

The best way to export Keycloak realm configurations is by utilizing the administrative REST API or command-line interface to output identity and access settings to a file.

Do I need detailed knowledge of the administrative REST API to manage realms?▼

Yes, operational tasks for managing Keycloak realms, clients, and themes require a detailed understanding of the administrative REST API and command-line interface.