CEO Open-IAM and Samarcande Holding- #IdentityManagement - #opensource #keycloak @TelecomValley - @IncubateurPCA - linkedin.com/in/pascal-flama…
Joined September 2016
- Tweets 3,568
- Following 751
- Followers 793
- Likes 2,667
36 Photos and videos
Pinned Tweet
IAM sovereignty has become a strategic necessity rather than a purely technical option. IAM sovereignty has become a strategic necessity rather than a purely technical option. janua.fr/iam-the-hidden-gdpr…
18
How to protect your privacy with a secondary email in Keycloak: when authenticating with external services via OAuth2/OpenID Connect, your primary email address is often shared... janua.fr/protect-your-privac… #keycloak #privacy #authentication #IAM
12
A custom http header to token claim mapper for Keycloak : we implement everything for our customers’ use cases. One of our clients asked us: how to pass the locale when authenticating in “client_credentials”? janua.fr/a-custom-http-heade… #keycloak #opensource #security #Authentication
30
ReCyF / NIS2: IAM at the heart of cyber compliance. Objective 10 — Identity and Access Management (IAM) — is a central pillar, . This article breaks down these requirements and explains how a sovereign IAM solution like Keycloak addresses them. janua.fr/iam-regulatory-comp…
13
How to get self-locking sessions in Keycloak with PIN step-up authentication : with our partner Please-Open It with share with you this article. janua.fr/self-locking-sessio… #keycloak #redhatSSO #CIAM #SSO #community
44
Get rid of your old Active directory/LDAP with keycloak and a small piece of custom software : just a POC for a LDAP bind proxy to log to KeyCloak with LDAP. janua.fr/ldap-bind-proxy-how…
#keycloak #redhatsso #IAM #CIAM #OpenSource
45
Keycloak OAuth2-Proxy Configuration Generator: we strongly advocate the use of authentication proxy pattern, the most efficient ways to secure applications without modifying their code. janua.fr/simplify-your-rever… #keycloak #redhatSSO #SSO
34
What is and how to use Keycloak Authenticator. An « authenticator » is a step in an authentication process, called « Authentication flow ». An impressive list of authenticators are available with Keycloak : janua.fr/keycloak-authentica… #keycloak #redhatSSO #SSO #CIAM #IAM
63
26 Dec 2025
How to simplify authentication in any application with an authentication proxy ? Over the years, we’ve encountered the same challenges repeatedly. janua.fr/authentication-prox… #keycloak #redhatSSO #security #community
68
12 Dec 2025
Keycloak roles restriction and full scopes. Learn with this article how and why you must restrict roles in tokens by turning off « full scope allowed » switch. janua.fr/keycloak-roles-rest…
42
Pascal FLAMAND retweeted
3 Oct 2025
Keycloak has announced "workflows" as a preview feature. A welcome feature we already implemented years ago with... n8n.
This is how we did :
blog.please-open.it/posts/ke…
2
1
202
Pascal FLAMAND retweeted
27 Nov 2025
Another module for Keycloak :
user attribute regexp mapper
Because in Keycloak user attributes are multivalued (with ability to aggregate them with "user attribute mapper"), we added a regexp filter only to send back attribute if it matches.
github.com/please-openit/key…
2
163
28 Nov 2025
Keycloak roles restriction and full scopes : for security concerns, you must restrict roles to a subset through the « Full Scope Allowed »
janua.fr/keycloak-roles-rest…
30
13 Oct 2025
With our partner please-open.it we implement everything necessary for our customers’ use cases. . How to make your custom workflow with Keycloak ? janua.fr/how-to-make-your-cu… #keycloak #IAM #SSO
64
18 Aug 2025
A JWT decoder in the system tray, to enhance your productivity setting up KeycCloak. With our customers, we decode JWT tokens dozens of times a day. janua.fr/a-jwt-decoder-in-th… #keycloak @redhatSSO #SSO #IAM
127
8 Aug 2025
A custom http header to token claim mapper for Keycloak : Our main partner please-open-it implement everything necessary for our customers’ use cases.
And one of our clients asked us: how to pass the locale when authenticating in “client_credentials”? #keycloak #redhatsso
63
Pascal FLAMAND retweeted
30 Jul 2025
Tired of always opening jwt.io?
30 Jul 2025
We built a desktop JWT decoder, directly accessible from the system tray :
blog.please-open.it/posts/jw…
github.com/please-openit/jwt…
1
5
333
5 Jun 2025
Keycloak User Agent Filter Authenticator: an authenticator that filters the user-agent header for Keycloak to exclude embedded webviews, ensuring compliance with specification requirements. The component reduces the attack surface janua.fr/keycloak-user-agent…
80
11 Dec 2024
Keycloak roles restriction and full scopes : for security concerns, you must restrict roles to a subset through the « Full Scope Allowed » Switch as by default a client has « roles » scope as « default » ... janua.fr/keycloak-roles-rest…
1
46
4 Oct 2024
Get rid of your old Active directory/LDAP with keycloak and a small piece of custom software : just a POC for a LDAP bind proxy to log to KeyCloak with LDAP janua.fr/ldap-bind-proxy-how…
69