#KEYCLOAK DevDay 2026: Mobile apps authentication with Keycloak - navigating the pitfalls

👉 This talk is from KEYCLOAK DevDay Community Conference 2026: https://keycloak-day.dev Speaker: Waldemar Korłub #OAuth 2.1 recommends Authorization Code Flow with #PKCE for all clients with user presence - including mobile apps. With off-the-shelf mobile libraries readily available, it may seem rather straightforward at first. However, between privacy features that limit cookies visibility across mobile apps and hinder SSO, security features that change redirect handling depending on user's interaction (or lack of it), iOS/Android discrepancies, UX designer complains about disconnected experience, superfluous system prompts and flickering between views - it becomes quite challenging to navigate around the pitfalls. In this talk I will discuss the challenges related to integrating mobile apps with Keycloak, what makes them different from web applications and how to handle them using both built-in Keycloak features and custom extensions. I will also discuss what is brewing for the future, e.g. the #OIDC Native #SSO for Mobile Apps 1.0 spec (still in draft as of this writing). Thanks for watching! Don't forget to subscribe 🔔 to my channel (if not already done) and give this video some thumbs up 👍 (aka "like"). Tell me about your experiences and thoughts about this topic in the comments. I'm looking forward to it! Thank YOU! --- I'm Niko - and I'm your Expert for Keycloak IAM & SSO and an independent freelance software consultant, developer and trainer. I'm here to help - you, your team and your company. How can I support you? Just get in contact: 🌎 Website: https://www.n-k.de 🔗 LinkedIn:   / dasniko   🚧 GitHub Profile: https://github.com/dasniko 🦣 Mastodon: https://mastodon.cloud/@dasniko 🎥 YouTube Channel:    / @dasniko   All things Java, All-End (Frontend, Backend, Fullstack Deployments), Authentication, Security 🔐, IAM, Keycloak, Containers, DevOps, Cloud ☁️, Serverless, On-Premise Please understand that YouTube Comments are not a good place to get support in case of questions and errors. There are forums and groups out there (see links above) which are the right place to ask!