keycloak-26-8
Articles tagged with keycloak-26-8.
Keycloak 26.8.2 Admin API Returns 401 for Service Accounts: The kc-admin-api Scope Fix
After upgrading to Keycloak 26.8.2, service account tokens get 401 from the Admin REST API. Why the new audience check…
7 min readKeycloak Client Secret Rotation in 26.8: How It Works
Keycloak 26.8 makes client secret rotation supported: two secrets overlap during a rotation, but nothing rotates on a timer and…
8 min readKeycloak 26.8.1 SAML Logout Fix: One Client Could End Another's Sessions
Keycloak 26.8.1 changes how SAML single logout treats a SessionIndex owned by another client. What the code did before, what…
6 min readCVE-2026-107121: Keycloak SMTP StartTLS Plaintext Downgrade
Keycloak 26.8.1 fixes CVE-2026-107121: realm SMTP with StartTLS on could still send credentials in plaintext. What changed, who is affected,…
8 min readKeycloak 26.8 OpenID4VP Verifier for EUDI Relying Parties
Keycloak 26.8.0 adds an experimental OpenID4VP verifier as an identity provider. What it supports, what it lacks, and a checklist…
14 min readKeycloak 26.8 SCIM API: Supported and On by Default
Keycloak 26.8 makes the native SCIM API supported and on by default, but each realm still needs its own toggle.…
13 min read
Keycloak Latest Version: 26.8.1 (13 Oct 2026) and History
Keycloak's latest version is 26.8.1, released 13 October 2026 on the 26.8 line that began 1 October. Version history from…
14 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.