27.0 Release

New issue

Open

Due by March 31, 2027

•Last updated Nov 10, 2026

7% complete

Remove deprecated org.keycloak.representations.idm.UserRepresentation#isTotp method
eol
keycloak/keycloak#43587 · opened on Oct 17, 2025 · 27.0 Release
PQC support for OAuth 2.0 and OpenID Connect
milestone
keycloak/keycloak#48821 · opened on May 8, 2026 · 27.0 Release
1
Remove deprecated code around sessions for the major release
eol
keycloak/keycloak#43260 · opened on Oct 7, 2025 · 27.0 Release
2
Remove PasskeysConditionalUIAuthenticator and the feature
eol
keycloak/keycloak#41574 · opened on Jul 31, 2025 · 27.0 Release
Remove UrlType.LOCAL_ADMIN
task
keycloak/keycloak#39193 · opened on Apr 24, 2025 · 27.0 Release
Remove allowMultipleAudiencesForJwtClientAuthentication config option of OIDC login protocol
eol
keycloak/keycloak#38845 · opened on Apr 10, 2025 · 27.0 Release
Remove old detection of lightweight access token
eol
keycloak/keycloak#38089 · opened on Mar 13, 2025 · 27.0 Release
Remove registrations endpoint
eol
keycloak/keycloak#36084 · opened on Dec 20, 2024 · 27.0 Release
1
Remove db default for production profile
eol
keycloak/keycloak#35816 · opened on Dec 11, 2024 · 27.0 Release
Remove adminUserCreationMessage attribute from welcome themes
eol
keycloak/keycloak#35667 · opened on Dec 5, 2024 · 27.0 Release
3
Remove isTotp() and setTotp() from UserRepresentation
eol
keycloak/keycloak#25727 · opened on Dec 20, 2023 · 27.0 Release
9
Stop using font icons for IdP logos
task
keycloak/keycloak#21548 · opened on Jul 10, 2023 · 27.0 Release
3
Remove client-initiated account linking legacy endpoints
eol
keycloak/keycloak#39049 · opened on Apr 17, 2025 · 27.0 Release
2
Create a plan to phase out SHA1 support
eol
keycloak/keycloak#32897 · opened on Sep 13, 2024 · 27.0 Release
10
Remove deprecated event types for password/otp update or removal
eol
keycloak/keycloak#32685 · opened on Sep 5, 2024 · 27.0 Release
7
Remove methods to get and set current refresh token AuthenticatedClientSessionModel
eol
keycloak/keycloak#30200 · opened on Jun 6, 2024 · 27.0 Release
Remove PasswordHashProvider.encode
eol
keycloak/keycloak#29529 · opened on May 14, 2024 · 27.0 Release
Remove Token Exchange V1
eol
keycloak/keycloak#44123 · opened on Nov 11, 2025 · 27.0 Release
3
Remove Fine-Grained Admin Permissions v1
eol
keycloak/keycloak#44122 · opened on Nov 11, 2025 · 27.0 Release
1
Define an explicit export surface for the admin client
eol
keycloak/keycloak#44260 · opened on Nov 17, 2025 · 27.0 Release
1
Support 2038 timestamps in Keycloak (Epochalypse)
enhancement
keycloak/keycloak#11053 · opened on Apr 1, 2022 · 27.0 Release
6
DN validation of reverse proxy
feature
keycloak/keycloak#35858 · opened on Dec 12, 2024 · 27.0 Release
19
Keycloak Installation in disconnected Environments fails
feature
keycloak/keycloak#15562 · opened on Nov 18, 2022 · 27.0 Release
3
Configurable transaction timeouts with categories
feature
keycloak/keycloak#26889 · opened on Feb 8, 2024 · 27.0 Release
8
Consider moving dockerfile examples from docs to quickstarts
enhancement
keycloak/keycloak#22715 · opened on Aug 25, 2023 · 27.0 Release

Navigation Menu

27.0 Release

Remove deprecated `org.keycloak.representations.idm.UserRepresentation#isTotp` method

PQC support for OAuth 2.0 and OpenID Connect

Remove deprecated code around sessions for the major release

Remove PasskeysConditionalUIAuthenticator and the feature

Remove UrlType.LOCAL_ADMIN

Remove allowMultipleAudiencesForJwtClientAuthentication config option of OIDC login protocol

Remove old detection of lightweight access token

Remove `registrations` endpoint

Remove db default for production profile

Remove adminUserCreationMessage attribute from welcome themes

Remove `isTotp()` and `setTotp()` from `UserRepresentation`

Stop using font icons for IdP logos

Remove client-initiated account linking legacy endpoints

Create a plan to phase out SHA1 support

Remove deprecated event types for password/otp update or removal

Remove methods to get and set current refresh token AuthenticatedClientSessionModel

Remove PasswordHashProvider.encode

Remove Token Exchange V1

Remove Fine-Grained Admin Permissions v1

Define an explicit export surface for the admin client

Support 2038 timestamps in Keycloak (Epochalypse)

DN validation of reverse proxy

Keycloak Installation in disconnected Environments fails

Configurable transaction timeouts with categories

Consider moving dockerfile examples from docs to quickstarts

Issues