Stian Thorgersen
- Co-founded the Keycloak project at Red Hat in 2013 and leads it
- Co-author of Keycloak: Identity and Access Management for Modern Applications
Bio
Stian Thorgersen co-founded Keycloak at Red Hat in 2013 and is its project lead and top contributor. He is a senior principal software engineer at Red Hat and co-wrote the book most teams learn Keycloak from.
Profile built from public project, employer, and publication records.
Where their work shows up
Keycloak is the reason a team can run standards-complete OpenID Connect, OAuth 2.0, and SAML 2.0 without a vendor contract, which matters most where data residency, air-gapped deployment, or budget rules out SaaS. It anchors the open-source end of the market; see the open-source identity vendors and the best IAM platforms ranking for where self-hosting sits against managed options.
Related on Start with Identity
- PodcastAuth0
The late Vittorio Bertocci's interviews with the authors of OAuth, OpenID Connect, FIDO, and SAML. Ended in 2022, and still the best audio archive on identity s
- Blog39% of identity CVEs are on CISA KEV, and edge appliances hold 62% of the exploited ones
SWI's Identity Vulnerability Report 2026 checked 137 identity CVEs against CISA's Known Exploited Vulnerabilities catalog and NVD. 53 are exploited, most of the
- GlossaryAccess Token
A short-lived credential a client presents to a resource server to access protected data. Access tokens are typically opaque or JWT-formatted, with lifetimes me
- GlossaryAgentic Identity
Identity for autonomous AI agents that act on a user's behalf, call APIs, and chain tools. Requires scoped, delegated, auditable, and revocable credentials rath
- GlossaryAuthorization (AuthZ)
Authorization (AuthZ) is the decision to permit or deny an authenticated subject access to a resource or action, and the rights that result; NIST's glossary, ci
- CVECisco SAML 2.0 mixes authorization domains
Cisco's SAML 2.0 implementation did not keep authorization domains apart. A token or assertion meant for one domain could authorize in another. May 2024. The pr