Keycloak 26.2 revises fine-grained admin permissions
The new release includes the standard token exchange, new instructions for use with Grafana and fine-grained admin permissions.
heise online · Keycloak 26.2 revises fine-grained admin permissions
#identitymanagement
3 posts3 participants0 posts today
Keycloak 26.2 überarbeitet feingranulare Admin-Berechtigungen
Im neuen Release sind der Standard Token Exchange, eine neue Anleitung für das Verwenden mit Grafana und feingranulare Admin-Permissions mit an Bord.
heise online · Keycloak 26.2 überarbeitet feingranulare Admin-Berechtigungen
heise+ | Identitätsmanagement: Mehr Sicherheit für Non-Human Identities
Nicht-menschliche Identitäten für automatisierte Prozesse und Systeminteraktionen sind attraktive Ziele für Cyberkriminelle. Die Top 10 der Risiken.
iX MagazinIdentitätsmanagement: Mehr Sicherheit für Non-Human IdentitiesNicht-menschliche Identitäten für automatisierte Prozesse und Systeminteraktionen sind attraktive Ziele für Cyberkriminelle. Die Top 10 der Risiken.
Damn, I expect an #identityManagement company like #Yubico to know better than to give people bad, outdated advice to "rotate passwords."
If you are using random, unique passwords stored in a password manager and using MFA wherever it's available (which is pretty much all sensitive sites nowadays!), there's no reason to rotate passwords that haven't been compromised. Telling people to do so decreases security rather than increasing it.
#infosec #BeIdentitySmart
Ref: https://www.yubico.com/blog/5-fast-cybersecurity-tips-to-clean-up-your-digital-life/
Yubico · 5 fast cybersecurity tips to clean up your digital lifeWith today being Identity Management Day, now is the perfect time to take stock of your online presence, update security settings, and ensure that your personal data remains protected from cyber threats like phishing. We’re also seeing increasing concerns of DeepSeek and other AI tools around data privacy making these kinds of attacks more successful […]
iX-Workshop API-Sicherheit: OWASP Top 10 API Security Risks
Lernen Sie hands-on, wie Sie Schwachstellen in der API-Implementierung vermeiden und Angriffe abwehren.
heise online · iX-Workshop API-Sicherheit: OWASP Top 10 API Security Risks
Microsoft Entra questions?
r/Entra on Reddit has become my go-to resource for quick, expert solutions from a growing community of identity pros.
Check it out → reddit.com/r/entra
iX-Workshop: Fortgeschrittene Administration von Kubernetes
Lernen Sie fortgeschrittene Techniken für das Applikationsmanagement und die Implementierung von Service-Mesh-Technologien.
heise online · iX-Workshop: Fortgeschrittene Administration von Kubernetes
Nigeria’s NIN Enrollment Surpasses 117 Million as Lagos and Kano Lead Registrations https://www.rainsmediaradio.com/2025/04/nigerias-nin-enrollment-surpasses-117.html?utm_source=dlvr.it&utm_medium=mastodon Follow, Like & Share #NIN #NIMC #Nigeria #IdentityManagement #DigitalIdentity
iX-Workshop: DevSecOps – Automatisierte Sicherheitstests für Webanwendungen
Automatisierte Sicherheitsprüfungen auf Anwendungsebene in den DevSecOps-Prozess integrieren.
heise online · iX-Workshop: DevSecOps – Automatisierte Sicherheitstests für Webanwendungen
iX-Workshop: AWS-Sicherheit - Angriffe erkennen und abwehren
Erfahren Sie, wie Angreifer Fehlkonfigurationen und mangelnde Härtung der Amazon Cloud ausnutzen und wie Sie AWS-Dienste und Cloud-Identitäten dagegen schützen.
heise online · iX-Workshop: AWS-Sicherheit - Angriffe erkennen und abwehren
Ik zoek contact met personen of bedrijven die evaring hebben met #keycloak #idm #iam in organisaties van omvang in nederland. En liefst ruimer dan alleen voor #sso en #Authenticatie
Ken je implementaties, migraties vanuit andere systemen?
Ken je implementatiepartners die dit doen, of mensen die Keycloak binnen hun eigen organisatie (bij voorkeur non-profit, liefst #onderwijs ) die beheren, aarzel niet om me te pingen. Mag ook n dm.
Boost waardeer ik!
iX-Workshop: OAuth und OpenID Connect mit Keycloak für Entwickler
Lernen Sie sichere Authentifizierung und Autorisierung in modernen Web-Applikationen mit OAuth 2.0, OpenID Connect und Keycloak - speziell für Java-Entwickler.
heise online · iX-Workshop: OAuth und OpenID Connect mit Keycloak für Entwickler
Mr T-Bone tip![New blog from Microsoft]
Unleash the power of Microsoft Entra HR! Get insights into the World’s Best Boss Edition & enhance your team’s provisioning game! 
#CloudComputing #IdentityManagement #MVPBuzz #Security #MicrosoftTechCommunity
[AI generated, Human reviewed]
Mr T-Bone tip![New blog from Microsoft]
Unleash the power of Microsoft Entra HR! Get insights into the World’s Best Boss Edition & enhance your team’s provisioning game!
#CloudComputing #IdentityManagement #MVPBuzz #Security #MicrosoftTechCommunity
[AI generated, Human reviewed]
iX-Workshop: Microsoft 365 sicher einrichten und datenschutzkonform betreiben
Microsoft 365 sicher betreiben und notwendige Maßnahmen in Bezug auf Datenschutz und Informationssicherheit umsetzen.
heise online · iX-Workshop: Microsoft 365 sicher einrichten und datenschutzkonform betreiben
iX-Workshop: Fortgeschrittene Administration von Kubernetes
Lernen Sie fortgeschrittene Techniken für das Applikationsmanagement und die Implementierung von Service-Mesh-Technologien.
heise online · iX-Workshop: Fortgeschrittene Administration von Kubernetes
I'm curious to hear what others are #SelfHosting! Here's my current setup:
Hardware & OS
- Hardware: #RaspberryPi500 (8 GB RAM, 512 GB SD card) #RPi #RPi500 #SingleBoardComputers #HomeLab
- OS: #Stormux, an accessible #Linux distro based on #ArchLinuxARM #LinuxAccessibility #AccessibleTech
Infrastructure & Networking
- Dashboard: #Glance (#Docker) #DockerApps
- Reverse Proxy: #Caddy
- DNS: #Cloudflare
- Domain Registrar: #Porkbun
- Networking & Remote Access: #Tailscale (non-Docker), love its SSH agent and magic DNS features. #NetworkSecurity
Security & Monitoring
- Ad Blocking: #AdGuardHome (non-Docker). Previously used PiHole but find AdGuardHome slightly faster. #PrivacyTools
- Server Monitoring: #Beszel (non-Docker). Tried Grafana/Prometheus/Alertmanager (accessible but overkill) and Netdata (poor screen reader accessibility). Beszel isn't perfect but best compromise so far. #ServerMonitoring
- Server Overview: #Cockpit (non-Docker)
- Security Tools: #Fail2ban, #FirewallD, #ClamAV, and #Rkhunter (non-Docker). Tried CrowdSec but couldn't get it working on Stormux. #CyberSecurity
- Service Uptime Monitoring: #UptimeKuma (Docker), accessible and easy to use. #MonitoringTools
Authentication & Identity Management
- Authelia (Docker): Just set this up for two-factor authentication and single sign-on. Seems to be working well so far!
- LLDAP (Docker): Lightweight LDAP server for managing authentication. Also seems to be working pretty well!
#AuthenticationTools #IdentityManagement
Productivity & Personal Tools
- Docker Management: #Dockge (Docker). More accessible than Portainer; main issue is built-in terminal isn't readable with screen readers. #DockerCompose
- Docker Logs Viewer: #Dozzle (Docker), great web interface and easy searching.
- Git Hosting: #Forgejo (non-Docker), my personal Git server. #GitServer
- Backups: #IDrive (non-Docker), backs up all my devices easily. #BackupSolutions
- Notes: #Joplin server (Docker). Accessibility improving; love the VSCode extension. #NoteTakingApps
- Bookmarks: #Linkding (Docker). Accessible bookmark manager with good browser extension support. #BookmarkManager
- Recipes: #Mealie (Docker), starting to learn cooking!
#CookingApps - RSS Feeds: #Miniflux (non-Docker), excellent accessibility. Originally wanted better podcast support but other options had major accessibility issues. #RSSReader
- Automation & Workflows: #N8N (Docker). Haven't explored deeply yet—open to ideas! #AutomationTools #WorkflowAutomation
- Pastebin Service: #PrivateBin (non-Docker). Considering alternatives or CLI tool for easier console access. #PastebinAlternative
- File Sharing & Editing: #Samba (non-Docker), easy file management from my Windows 11 mini PC. #FileSharing #Windows11
- Search Engine: #SearXNG (non-Docker), accessible and searches multiple engines at once. #PrivacySearchEngine
- IRC Client: #TheLounge (non-Docker). Some accessibility issues but best I've found so far for always-connected IRC. #IRCClient
- Read Later Service: #Wallabag (Docker). Biggest issue is Wallabagger Chrome extension doesn't work for me yet. #ReadItLater
Notifications & Development Workflow
- Notifications via: #Ntfy (Docker) and Zoho's ZeptoMail (#Zoho)
- Development Environment: Mostly using VSCode connected to my server via Remote-SSH extension. #VSCodeRemote
Accessibility Focus 
️
Accessibility heavily influences my choices—I use a screen reader full-time (#ScreenReader), so I prioritize services usable without sight (#InclusiveDesign, #DigitalAccessibility). Always open to discussing accessibility experiences or recommendations!
I've also experimented with:
- Ollama (#Ollama): Not enough RAM on my Pi.
- Habit trackers like Beaver Habit Tracker (#HabitTracking): Accessibility issues made it unusable for me.
I don't really have a media collection, so no Plex or Jellyfin here (#MediaServer)—but I'm always open to suggestions! I've gotten a bit addicted to exploring new self-hosted services! 
What's your setup like? Any cool services you'd recommend I try?
#SelfHosted #LinuxSelfHost #OpenSource #TechCommunity #FOSS #TechDIY
iX-Workshop: Effektive zentrale Authentifizierung mit Entra ID
Erfahren Sie, wie Sie Entra ID als Cloud-basierten Authentifizierungsdienst einsetzen und hybride Identitäten sicher verwalten.
heise online · iX-Workshop: Effektive zentrale Authentifizierung mit Entra ID
iX-Workshop: Deep Dive in die OpenAI API - KI in eigene Anwendungen integrieren
Erfahren Sie, wie Sie die OpenAI API nutzen können, um KI-Funktionen in Ihre Projekte zu integrieren und innovative Lösungen zu entwickeln.
heise online · iX-Workshop: Deep Dive in die OpenAI API - KI in eigene Anwendungen integrieren