- An Introduction to the OpenID Shared Signals Framework by Thomas Darimont (Sunday, 09:05)
-
As security threats become more sophisticated, the need for efficient, real-time communication between identity providers and relying parties is essential. The Shared Signals Framework (SSF) and related specifications such as CAEP and RISC address this challenge by providing a standardised way for systems to exchange security related signals, such as session revocations, credential breaches, and other identity-related incidents, in a secure and scalable manner. This talk introduces the Shared Signals Framework and explains how it enhances security and operational efficiency in modern identity ecosystems. We’ll explore how SSF can be supported in Keycloak to enable real-time event-driven communication between providers and relying parties. Attendees will learn how Keycloak can help to detect and mitigate threats, and improve overall system security with SSF.
- Keeping applications secure by evolving OAuth 2.0 and OpenID Connect by Alexander Schwartz (Sunday, 10:05)
-
OAuth 2.0 and OpenID Connect have been around for years to secure web and mobile applications alike with growing popularity.
To keep your applications and their data secure, these standards are evolving to align with security best practices.
Join this talk to see how the FAPI 2.0 Security Profile and the upcoming OAuth 2.1 standard promotes and enforces best practices, how to adapt your applications, and how Keycloak as an Open Source IAM can help you. Expect a demo and examples for some of the enhancements.
Meet Keycloak at FOSDEM on Jan 30/Feb 01!
January 26 2026 by Alexander Schwartz
FOSDEM is a free event for software developers to meet, share ideas and collaborate. Every year, thousands of developers of free and open source software from all over the world gather at the event.
Several Keycloak related talks happen at FOSDEM in Brussels on January 31st and February 1st, and meet us and help out at the stand. To get the latest updates, subscribe to our discussion on GitHub.
Meet the community at the Sovereign Identity stand
On Saturday, January 31st 2026, the Keycloak project will co-host the “Sovereign Identity for server, desktop, and a cloud” stand together with the FreeIPA, SSSD and OpenWallet project. We’ll be open from 1000 in the morning until around 1800 in the early evening.
We will be at K building on level 1 in group C. Visit this stand to interact with the teams of several popular solutions in this space.
- Keycloak
-
Extensible self-hosted Single-Sign-On for your applications. Supporting Passkeys, OpenID Connect, OAuth 2.0, SAML 2.0 and Kerberos. Integrating with other Identity Providers through brokerage via SAML or OpenID Connect, or via LDAP.
- FreeIPA
-
Manage Linux users and client hosts in your realm from one central location, define Kerberos authentication and authorization policies for your identities, create mutual trust with other Identity Management systems. Issue certificates to your users and services.
- SSSD
-
Open Source Client for Enterprise Identity Management. Enroll your Linux machine into an Active Directory, FreeIPA or LDAP domain. Use remote identities, policies and various authentication and authorization mechanisms to access your computer.
- OpenWallet Foundation
-
We drive global adoption of open, secure and interoperable digital wallet solutions. We set best practices for digital wallet technology through collaboration on standards-based OSS components that issuers, wallet providers and relying parties can use to bootstrap implementations that preserve user choice, security and privacy.
Talks about Keycloak and related topics
FOSDEM is a big event divided into smaller, single-track conferences with their own call for papers and organizers. Submit by November 30th to be part it!
Here a short list of those dev rooms that might be of interest for you if you are into Keycloak:
- Identity and Access Management Devroom (Sunday)
-
This is all about identity, integration of identities and the various open source technologies available for that. There are two Keycloak-related talks on the schedule:
- Security Devroom (Saturday)
-
Everything that is relevant to security in the free software and open source world. Talks cover topics like cryptography, supply chain, secure development and hardening.
- Open Source & EU Policy Devroom (Sunday)
-
Connecting developers and EU lawmakers from the European institutions to discuss the impact of past, ongoing, and upcoming EU laws affecting the Open Source community. The day will feature interventions from lawmakers from the European Commission and Parliament, as well as from the community, and will include presentations, workshops, short talks and Q&As.
- Building Europe’s Public Digital Infrastructure (Saturday)
-
The Building Europe’s Public Digital Infrastructure devroom is for discussing topics and issues related to full-stack digital sovereignty, from secure and interoperable digital workspaces to sovereign cloud infrastructure, including standards, technologies, and best practices for designing, deploying, and operating independent and resilient digital ecosystems for the public sector.
Stay in touch with our latest activities
We hope to see a lot of you either online or on site in Brussels at FOSDEM!
To get the latest updates, subscribe to our discussion on GitHub.