DevOps Tools, CI/CD and Automation Guides - Page 3

What Keycloak Direct Access Grants means, why grant_type=password is discouraged, common token-endpoint errors, and safer replacements (PKCE, device flow, client credentials) on Keycloak 26.7.3.

Push OAuth authorization parameters to Keycloak with PAR, complete Authorization Code flow using request_uri on Keycloak 26.7.3, and enforce PAR per client with confidential client authentication.

Configure Keycloak Standard Token Exchange v2 with subject_token, requester client scopes, audience filtering, claim comparison before and after exchange, and troubleshooting invalid_target and access_denied errors on …

Configure Keycloak RP-initiated logout with id_token_hint and post_logout_redirect_uri, compare front-channel and backchannel logout across two clients, and diagnose stale app sessions on Keycloak 26.7.3.

Discover Keycloak issuer and JWKS URI, verify RS256 access token signatures locally with kid lookup, validate iss aud and exp claims, reject ID tokens at APIs, and handle unknown kid after key rotation on Keycloak …

Revoke Keycloak access and refresh tokens with the RFC 7009 endpoint, compare introspection and local JWT checks after revocation, and choose between endpoint revoke, logout, session termination, and client secret …

Configure Keycloak Client Initiated Backchannel Authentication on a confidential client, run a minimal HTTP authentication channel, post a login_hint backchannel request, and poll with auth_req_id for access tokens on …

POST access tokens to Keycloak token introspection with curl and a confidential client, read active true or false after expiry logout and audience mismatch, and compare local JWT verification on Keycloak 26.7.3.

Walk through Keycloak Device Authorization Grant on a public CLI client: request device and user codes, poll with interval and slow_down, complete browser verification, and call UserInfo after approval.

Request Keycloak offline tokens with offline_access through Authorization Code flow, refresh after SSO logout, tune Offline Session Idle and Max Limited, rotate and revoke safely, and compare offline refresh tokens with …

Request a Keycloak client_credentials access token with curl and HTTP Basic auth, decode service-account claims (sub, azp, aud, roles), check audience and roles at orders-api, and tell token-endpoint 401 apart from API …

Use Keycloak refresh tokens with curl, enable Revoke Refresh Token and Max Reuse, relate refresh_expires_in to client and SSO sessions, and diagnose invalid_grant after logout, idle timeout, or token reuse on Keycloak …

Configure Keycloak PKCE on a public client with S256, generate a code verifier and challenge, complete Authorization Code flow, and prove a stolen code fails without the verifier on Keycloak 26.7.3.

Walk through Keycloak Standard Flow with a confidential server-side client: build the authorization URL, exchange the code with curl, validate state and nonce, refresh tokens, and reproduce common invalid_grant errors.

Learn how Keycloak user sessions, client sessions and offline sessions work, how they relate to tokens and SSO, and how to view or revoke them.

Configure a public Keycloak OIDC client with PKCE, run Authorization Code flow, inspect ID and access JWTs, call UserInfo, and validate the bearer token at a small Python API on Keycloak 26.7.3.

Free CKS exam prep course covering all six Linux Foundation security domains, with hands-on kubeadm labs for kube-bench, Trivy, Cosign, Falco, and gVisor.

Free CKA exam prep course covering all five Linux Foundation domains, with hands-on kubeadm labs on Rocky Linux VMs tested on Kubernetes 1.36.

Free CKAD exam prep course covering all five Linux Foundation domains, with hands-on labs, 25 practice tasks, and a cheat sheet tested on Kubernetes 1.36.

Free Kubernetes Operator course on CRDs, controller-runtime, and Go, Helm, and hybrid operators, with hands-on labs tested on Operator SDK 1.42 and kind.

Free Kubernetes tutorial from first cluster to Helm, RBAC, and upgrades, with hands-on lessons run on Kubernetes 1.36 kubeadm clusters, local and on AWS.

Free Podman tutorial tested on RHEL 10.2 with Podman 5.8: run rootless containers, build images, set up networking, and deploy services with Quadlet.

Free Git and GitHub tutorial with hands-on examples tested on Git 2.52: commits, branches, merge and rebase, remotes, undo, and history cleanup.

Free Ansible tutorial and Red Hat RHCE EX294 exam prep with hands-on labs on Rocky Linux 10: playbooks, roles, Vault, and RHCSA tasks automated end to end.

Free Keycloak tutorial and IAM course covering realms, clients, OIDC, LDAP federation, SAML, and operations, with Podman labs tested on Keycloak 26.7.

Free Terraform Associate (004) exam prep course covering the full HashiCorp blueprint, with hands-on labs on one Ubuntu VM and no cloud account needed.

Compare OAuth and OIDC access tokens, ID tokens, and refresh tokens by purpose, recipient, validation, and lifecycle, with sanitized Keycloak JWT examples.

Compare Keycloak vs Red Hat Build of Keycloak (RHBK), including support, versions, lifecycle, supported platforms, container images, features, and when to use each.

Compare Keycloak SCIM provisioning with LDAP user federation on Keycloak 26.7: data flow, passwords, lifecycle, Preview limits, and when to use LDAP, SCIM, or both.

Decide whether Keycloak should validate users against LDAP or Active Directory with user federation, or redirect login to an upstream OIDC or SAML identity provider with identity brokering.