Training:
Keycloak Masterclass

Advanced Configuration, Development, and Operations in Practice

Illustration: 4 Personen an Notebooks und Whiteboard, die diskutieren, planen und programmieren.

Training "Keycloak Masterclass"

online or inhouse

The workshop is designed to last 2 days as standard. However, the content and duration can be individually customized. Let's talk about the possibilities!

Everything at a glance: What to expect in the training

In this hands-on training, you’ll learn the fundamental concepts of Identity and Access Management (IAM). We’ll introduce you to Keycloak’s core functionality and show you how to understand and apply single sign-on, OAuth, and OpenID Connect in practice. After the training, you’ll be able to deploy Keycloak, perform basic configurations, and securely connect your own applications to Keycloak.

1. Advanced Keycloak Configuration

Roles & Permissions
SSO: Centralized Login/Logout into a Shared Session
Keycloak Authorization Services (RBAC, ABAC, …)
MFA / OTP / Passkeys
Integration of Identity Providers with One Another: Keycloak in Keycloak, EntraID, …
User Lifecycle

2. Development

Extensions: Integrating Existing Ones & Developing Your Own
Theming
Keycloak API

3. Application Landscape / DevOps

Config as Code
High Availability / Cluster Operation
Performance & Scaling

4. Operations

Backup & Restore
Monitoring / Logging
Upgrades & Migration
Security Hardening
Deployment with Helm & Kubernetes
CI/CD (Custom Image)

Learning objectives

If you’re an administrator or developer who’s already gained some initial experience with Keycloak, this workshop will teach you how to implement advanced configurations for roles, permissions, and multi-factor authentication. You’ll also learn how to securely integrate Keycloak as an identity provider into complex system landscapes—for example, via API gateways or external providers—and how to meet specific requirements using themes and extensions.

Furthermore, you’ll gain practical know-how for stable and secure day-to-day operations: from monitoring, backup, and security hardening to scaling and modern DevOps practices such as CI/CD, Config as Code, and deployment in Kubernetes environments. This will ensure you’re fully prepared to use Keycloak securely and efficiently as a central component of a professional IT infrastructure.

Certificate

At the end, you'll receive a codecentric certificate of participation

Target group

IT administrators, DevOps engineers, and software developers with basic experience in Keycloak who want to deepen their practical knowledge of advanced configuration, integration, and operations.
Software architects and technical project managers who want to integrate and customize Keycloak as a central identity provider in complex system landscapes.

Prerequisites:

Basic knowledge of Keycloak
Basic understanding of OAuth 2/OIDC
A local computer with a working Docker or Podman installation to complete the hands-on labs

The speakers

Stefan Gries

IAM & IT Consultant, Software Engineer

Jens Lehnhoff

IT Delivery Manager

Dominique Metz