Keycloak Roles, Composite Roles, and Groups
When to use a Keycloak realm role, client role, composite role or group — with the token each one produces, measured on 26.8.0, and the six ways it goes wrong.
Keycloak Multi-Tenancy: Realms, Groups, or Organizations?
Choose between realm-per-tenant, group-per-tenant and Keycloak Organizations for multi-tenant B2B SaaS, with measured costs, the failure modes of each, and how native organizations differ from the Phase Two organizations extension.