Free webinar: The Keycloak mistake that 90% of all developers make (and how to avoid it)

Want to avoid the Keycloak mistake that 90% of all developers make? Then join our free webinar with our trainer Niko Köbler.

It’s happening on Friday, September 12, 2025, from 11 a.m. to 12 p.m. – register now via LinkedIn.

What is the webinar about?

You roll out Keycloak, everything works—or so you think. But there is a problem that almost everyone overlooks.

Keycloak makes it deliberately easy for developers: by default, it packs a lot of information into your access tokens—roles, claims, metadata. At first, this feels good because everything “just works.”

But this convenience comes at a price:

• Your tokens contain more data than necessary
• Recipients receive information they don’t need or shouldn’t know
• Data protection principles are not implemented optimally
• HTTP requests can fail due to tokens that are too large

In this webinar, you will learn:

• Why Keycloak reveals “too much of a good thing” by default
• Which token contents are really necessary (and what is not)
• How to implement data minimization through targeted configuration
• Practical settings and strategies for lean, secure tokens

The result: Data protection-compliant tokens that contain exactly what the recipient needs – no more, no less. Security by design instead of by chance.

Note Registration for the free webinar is via LinkedIn, and the webinar itself will be held via Zoom.