Learn how to maintain control as a software architect in the age of coding agents.
🔎 Discover our new training: Architecture in the Context of Agentic Development.
socreatory training
socreatory training
Popular

Keycloak IAM & SSO Masterclass

Basics
1-3 days
12
Seats
German and English
Online and in-person
From
2026-11-24

Also available as in-house training

We run this training exclusively for your team, online or on site.
In-house Offerings

Objectives

  • Deployment and High-Availability, Fail-Safe Cluster Operation of a Keycloak System
  • Config-as-Code with the Keycloak Terraform Provider
  • Using the Keycloak Admin CLI
  • Importing/Exporting Realm Data
  • Testing and Monitoring System and Event Metrics
  • OAuth 2, OIDC & JWT – Fundamentals, Best Practices, Grant Types, Token Propagation
  • Keycloak Configuration: Realm, Organizations, Clients, Users, Groups, Roles
  • Configuring User Profiles and Organizations
  • Implementing User Federation and Identity Providers
  • Designing Authentication Flows and Implementing Required Actions
  • Customizing the Keycloak Environment to Meet Your Needs (Customization & Theming)

Curriculum

Day 1 - Deployment, Operations, Observability, etc.

Server Setup & Configuration

  • Keycloak server configuration and deployment (including database)
  • Versions & Upgrades
  • Backup & Recovery

Clustering and Distributed Caching

  • Configuring the Keycloak server for cluster operation
  • Customizing / tuning the (distributed) cache configuration

Realm Configuration, Config-as-Code & Import/Export

  • Config-as-Code with the Keycloak Terraform provider
  • Using the Keycloak Admin-CLI

  • Realm Export & Import
  • Importing Preconfigured Realms

Performance & Metrics

  • Load/Performance Tests
  • System Metrics
  • Event Metrics

Day 2 - Fundamentals, Realms & Clients, etc.

Fundamentals & Specifications

  • Single Sign-On Fundamentals (SSO)
  • Basic knowledge of the OAuth2, OpenID Connect (OIDC), and JSON Web Token (JWT) specifications

Realms & Clients

  • Principles and configuration of Keycloak realms
  • Getting started with tokens, claims, and client scopes
  • Client configurations (confidential/public) in Keycloak, using a distributed application as an example
  • Customizing the appearance of Keycloak forms and user interfaces

Day 3 - User Management, Tenants, Authentication Flows & Required Actions

User Management and Sources

  • Organizations, users, groups, and roles in Keycloak
  • Creating organizations for multi-tenant capability
  • Assigning and inviting users to organizations
  • User profiles with managed attributes, permissions, required fields, and validators
  • Clarification of the differences between user federation, user storage, and external identity providers
  • Configuring an LDAP server as a user federation
  • Using custom user data sources
  • Configuring an external identity provider (identity brokering)
  • Interaction between organizations and external identity providers

Authentication Flows and Required Actions

  • Design and configuration of various authentication flows
  • Extending authentication options using custom extensions
  • Using required actions
  • Configuring additional authentication policies

Audience

This training is perfect for you if you…

  • …are a developer or architect who wants to use Keycloak in your project or gain a deeper understanding of it,
  • …are a DevOps engineer who needs to deploy and operate Keycloak—reliably and securely,
  • …have “managed to get by” with Keycloak so far, but know there’s more to it,
  • …want to build Keycloak expertise within your team and be able to explain it to others.

Prior knowledge of OAuth 2 or OIDC is helpful but not required—we’ll cover the basics together.

Technical Prerequisites

The training environment is based on Docker Compose, which keeps operational overhead to a minimum. You’ll receive all YAML definitions, configuration files, and Keycloak extensions in advance via a GitHub repository.

Required:

  • Notebook/laptop with local admin privileges
  • Docker and Docker Compose V2—installed and running
  • Text editor (e.g., VS Code, Notepad++, …)
  • Internet access

Notes:

Docker Desktop may require a fee depending on the platform—please check in advance. Podman can be used as an alternative, but its use is not supported.

Description

This training gives you a complete overview of all Keycloak topics - practical and tailored to your needs. The choice is yours:

  • Three-day masterclass for a comprehensive overall package
  • 1-day “Keycloak Deployment & Operations” workshop for a targeted introduction to operation and deployment
  • 2-day training course “Keycloak IAM & SSO Fundamentals”, which focuses on the basics of identity management and single sign-on

👉 You can select the option that fits you best in the shop.

‍

‍

You don’t just want to get Keycloak up and running—you want to do it right. From deployment and high availability to OAuth 2 / OIDC fundamentals, authentication flows, multi-tenancy, and user federation: In this Keycloak training course, you’ll learn everything you need to know for professional, secure Keycloak operations.

‍

The Three Training Days at a Glance

We’ll start by setting up a Keycloak server from scratch—containerized with Docker, but with configuration options that you can adapt to any infrastructure (Kubernetes, Podman, or a traditional deployment on the file system).

Since an authentication system must never fail, we’ll set up a high-availability cluster with a load balancer right away. We manage realm configurations as config-as-code using the Keycloak Terraform provider and the Admin CLI, so that changes are traceable, versionable, and repeatable. Finally, we set up monitoring with system and event metrics and run initial performance tests.

‍

Day 2 – Understanding OAuth 2, OIDC, and Keycloak Configuration

Theory Meets Practice: We’ll develop a shared understanding of the OAuth 2.0 and OIDC specifications—including current best practices and deprecated features—and immediately apply it to a live Keycloak server. We’ll cover tokens, claims, client scopes, and realm and client configurations in detail.

‍

Day 3 – User Management, Tenants, and Authentication Flows

Der mächtigste Part: Wir richten Organisationen als Mandantenkonzept ein, ordnen Benutzer zu und laden sie gezielt ein. User Profile mit verwalteten Attributen, Berechtigungen und Validatoren geben dir die volle Kontrolle über deine Benutzerdaten. Danach verbinden wir LDAP als User Federation und konfigurieren externe Identity Provider (Entra ID, Social Login, Bund.ID u. a.) für Identity Brokering. Den Abschluss bildet das Design komplexer Authentifizierungsflows, Nutzung von Passkeys und die Konfiguration von Required Actions.

Trainers

Niko Köbler

Freelance Keycloak Expert

Main Skills

Keycloak, IAM

Online Courses

In-house Training

You can also book this training as an in-house training course exclusively for your team. Please use the enquiry form for more details.

Enquire now

You may also like

Workshop

Keycloak Extensions

Basics
Advanved
1 day
12
seats
German and English
Online and In-person
Custom Quote
Workshop

Keycloak Quickstart

Basics
Advanved
1 Day
12
seats
German and English
Online and In-person
Custom Quote

Frequently Asked Questions

What is the maximum number of participants in a training session?

For most training sessions, we limit the maximum number of participants to 12 per instructor. This allows us to ensure that you receive the best possible guidance.

Are meals provided during in-person training sessions?

Of course, we’ll take care of your meals during our in-person training sessions. We usually provide snacks twice a day and lunch. Drinks are also available.

Where can I find information about the training session I've already booked?

You can find all the information about your training in our socreatory Navigator. Here, in addition to useful links and information, you’ll find the specific location of the training for in-person sessions and the link to the video call for online sessions.

When and how will I receive my certificate of attendance after the training?

If you have attended at least 75% of the sessions, you will receive a certificate of attendance from us. You can download it from our socreatory Navigator a few days after the training.

Why socreatory?

Beyond the expertise of our trainers and our wide range of training courses, we offer even more compelling reasons to train with us.

All the benefits at your fingertips – download our program overview!

Unique Variety

We offer you the most comprehensive training program for software architecture in the German-speaking region – accredited and certified by iSAQB®.

Powerful IT expertise

Our experienced trainers are renowned experts in the industry and have co-developed 80 percent of the module curricula, both in terms of content and teaching methodology.

Hands-on learning experience

We are committed to providing interactive and engaging learning experiences, ensuring all participants can directly apply what they've learned.

Fair pricing model

The total price is reduced for as few as two participants from your company. Furthermore, you benefit from early bird pricing and enhanced planning certainty.

Looking for team training?

Unlock your team's potential with our specialized software architecture courses. We offer a variety of options, from in-depth iSAQB® training to customized workshops tailored precisely to your company's needs. Discover how these training programs can enhance your team's skills, and take advantage of attractive group and package discounts to maximize the value of your investment.