<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>iamfilip</title><link>https://iamfilip.dev/</link><description>Hands-on notes about Identity &amp; Access Management: Keycloak, OpenID Connect, SAML, Entra ID and running Keycloak on Kubernetes, with labs you can run on your laptop.</description><generator>Hugo</generator><language>en-US</language><lastBuildDate>Mon, 02 Nov 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://iamfilip.dev/index.xml" rel="self" type="application/rss+xml"/><item><title>Keycloak Is Not Your Zero Trust Architecture</title><link>https://iamfilip.dev/posts/zero-trust-keycloak/</link><pubDate>Mon, 02 Nov 2026 00:00:00 +0000</pubDate><guid>https://iamfilip.dev/posts/zero-trust-keycloak/</guid><description>Where Keycloak's job ends and your APIs' job begins: two Go APIs, eleven requests that should succeed or fail, and the results from a real run.</description></item><item><title>Keycloak Token Exchange, Hands-On</title><link>https://iamfilip.dev/posts/keycloak-token-exchange/</link><pubDate>Fri, 30 Oct 2026 00:00:00 +0000</pubDate><guid>https://iamfilip.dev/posts/keycloak-token-exchange/</guid><description>How standard token exchange (RFC 8693) works in Keycloak 26, why the audience is everything, and a Docker lab that shows the main success and failure cases on the wire.</description></item></channel></rss>