Latest Release Notes:
Version 26.0.6
- Admin events might include now additional details about the context when the event is fired.
-
Updates to documentation of X.509 client certificate lookup via proxy.
Version 26.0.5
- LDAP users are created as enabled by default when using Microsoft Active Directory
Version 26.0.0
-
Dedicated release cycle for the client libraries
-
Compatibility of the client libraries with the server
-
User sessions persisted by default
-
New default login theme
-
Highly available multi-site deployments
-
Admin Bootstrapping and Recovery
-
OpenTelemetry Tracing preview
-
OpenID for Verifiable Credential Issuance
-
DPoP improvements
-
Removal of GELF logging handler
-
Lightweight access tokens for Admin REST API
-
Keycloak JavaScript adapter now standalone
-
Hostname v1 feature removed
-
Automatic redirect from root to relative path
-
Persisting revoked access tokens across restarts
-
Client Attribute condition in Client Policies
-
Specify different log levels for log handlers
-
Proxy option removed
-
Option
proxy-trusted-addresses
added -
Option
proxy-protocol-enabled
added -
Option to reload trust and key material added
-
Options to configure cache max-count added
-
The
https-trust-store-*
options have been undeprecated -
The
java-keystore
key provider supports more algorithms and vault secrets -
Adding support for ECDH-ES encryption key management algorithms
-
New generalized event types for credentials
-
Keycloak CR supports standard scheduling options
-
KeycloakRealmImport CR supports placeholder replacement
-
Configuring the LDAP Connection Pool
-
nfinispan marshalling changes to Infinispan Protostream
-
Removal of OSGi metadata
-
Identity Providers no longer available from the realm representation
-
Securing Applications documentation converted into the guide format
-
Property
origin
in theUserRepresentation
is deprecated