27.0 Release

Issues

• Remove deprecated org.keycloak.representations.idm.UserRepresentation#isTotp method

  kind/eolteam/core-iam
  eol

  keycloak/keycloak#43587 · Filter by author pedroigor opened on Oct 17, 2025 · 27.0 Release
  

• PQC support for OAuth 2.0 and OpenID Connect

  kind/milestoneteam/core-protocols
  milestone

  keycloak/keycloak#48821 · Filter by author stianst opened on May 8, 2026 · 27.0 Release
  1

• Remove deprecated code around sessions for the major release

  kind/eolstatus/triageteam/production-readiness
  eol

  keycloak/keycloak#43260 · Filter by author ahus1 opened on Oct 7, 2025 · 27.0 Release
  2

• Remove PasskeysConditionalUIAuthenticator and the feature

  area/authentication/webauthnkind/eolteam/core-authn
  eol

  keycloak/keycloak#41574 · Filter by author mposolda opened on Jul 31, 2025 · 27.0 Release

• Remove UrlType.LOCAL_ADMIN

  kind/taskteam/cloud-native
  task

  keycloak/keycloak#39193 · Filter by author shawkins opened on Apr 24, 2025 · 27.0 Release

• Remove allowMultipleAudiencesForJwtClientAuthentication config option of OIDC login protocol

  area/oidckind/eolteam/core-protocols
  eol

  keycloak/keycloak#38845 · Filter by author mposolda opened on Apr 10, 2025 · 27.0 Release

• Remove old detection of lightweight access token

  kind/eolteam/core-protocols
  eol

  keycloak/keycloak#38089 · Filter by author mposolda opened on Mar 13, 2025 · 27.0 Release

• Remove registrations endpoint

  area/oidckind/eolteam/core-protocols
  eol

  keycloak/keycloak#36084 · Filter by author mposolda opened on Dec 20, 2024 · 27.0 Release
  1

• Remove db default for production profile

  kind/eolteam/cloud-native
  eol

  keycloak/keycloak#35816 · Filter by author shawkins opened on Dec 11, 2024 · 27.0 Release

• Remove adminUserCreationMessage attribute from welcome themes

  area/welcome/uikind/eolteam/cloud-native
  eol

  keycloak/keycloak#35667 · Filter by author shawkins opened on Dec 5, 2024 · 27.0 Release
  3

• Remove isTotp() and setTotp() from UserRepresentation

  area/corekind/eolteam/core-authnteam/core-iamteam/core-shared
  eol

  keycloak/keycloak#25727 · Filter by author jonkoops opened on Dec 20, 2023 · 27.0 Release
  9

• Stop using font icons for IdP logos

  kind/task
  task

  keycloak/keycloak#21548 · Filter by author jonkoops opened on Jul 10, 2023 · 27.0 Release
  3

• Remove client-initiated account linking legacy endpoints

  area/authenticationarea/identity-brokeringkind/eolteam/core-iamteam/core-protocols
  eol

  keycloak/keycloak#39049 · Filter by author mposolda opened on Apr 17, 2025 · 27.0 Release
  2

• Create a plan to phase out SHA1 support

  kind/eolstatus/triageteam/core-iamteam/core-protocols
  eol

  keycloak/keycloak#32897 · Filter by author stianst opened on Sep 13, 2024 · 27.0 Release
  10

  

• Remove deprecated event types for password/otp update or removal

  area/authenticationkind/eolteam/core-authn
  eol

  keycloak/keycloak#32685 · Filter by author mposolda opened on Sep 5, 2024 · 27.0 Release
  7

• Remove methods to get and set current refresh token AuthenticatedClientSessionModel

  area/authenticationkind/eolteam/core-authn
  eol

  keycloak/keycloak#30200 · Filter by author graziang opened on Jun 6, 2024 · 27.0 Release

• Remove PasswordHashProvider.encode

  area/authenticationkind/eolpriority/normalteam/core-authn
  eol

  keycloak/keycloak#29529 · Filter by author mposolda opened on May 14, 2024 · 27.0 Release

• Remove Token Exchange V1

  kind/eolteam/core-protocols
  eol

  keycloak/keycloak#44123 · Filter by author stianst opened on Nov 11, 2025 · 27.0 Release
  3

• Remove Fine-Grained Admin Permissions v1

  area/admin/fine-grained-permissionskind/eolteam/core-iam
  eol

  keycloak/keycloak#44122 · Filter by author stianst opened on Nov 11, 2025 · 27.0 Release
  2

• Define an explicit export surface for the admin client

  kind/eol
  eol

  keycloak/keycloak#44260 · Filter by author jonkoops opened on Nov 17, 2025 · 27.0 Release
  1

• Support 2038 timestamps in Keycloak (Epochalypse)

  area/corekind/enhancementteam/production-readiness

  100Filter by Votes: 100

  HighFilter by Value: High

  MediumFilter by Effort: Medium
  enhancement

  keycloak/keycloak#11053 · Filter by author ahus1 opened on Apr 1, 2022 · 27.0 Release
  6

• DN validation of reverse proxy

  area/corearea/dist/quarkuskind/featurestatus/triageteam/cloud-native
  feature

  keycloak/keycloak#35858 · Filter by author vmuzikar opened on Dec 12, 2024 · 27.0 Release
  19

• Keycloak Installation in disconnected Environments fails

  area/operatorkind/featureteam/cloud-native
  feature

  keycloak/keycloak#15562 · Filter by author joeltraber opened on Nov 18, 2022 · 27.0 Release
  3

• Configurable transaction timeouts with categories

  area/dist/quarkuskind/featurestatus/triageteam/cloud-native
  feature

  keycloak/keycloak#26889 · Filter by author stianst opened on Feb 8, 2024 · 27.0 Release
  8

• Consider moving dockerfile examples from docs to quickstarts

  area/dist/quarkusarea/docskind/enhancementstatus/triageteam/cloud-native
  enhancement

  keycloak/keycloak#22715 · Filter by author vmuzikar opened on Aug 25, 2023 · 27.0 Release