FFFF 27.0 Development Milestone Milestone · keycloak/keycloak · GitHub

27.0 Development Milestone

New issue

Open

Due by January 29, 2027

•Last updated Nov 12, 2026

No release checkpoint milestone for 27

16% complete

Promote HTTP optimized serializers feature to supported
enhancement
keycloak/keycloak#45157 · opened on Jan 6, 2026 · 27.0 Development Milestone
11
Deprecate the podTemplate field
enhancement
keycloak/keycloak#40185 · opened on Jun 3, 2025 · 27.0 Development Milestone
1
Add strategies to deal with workflow step failures
enhancement
keycloak/keycloak#46317 · opened on Feb 13, 2026 · 27.0 Development Milestone
Support for OID4VCI (OpenID for Verifiable Credential Issuance)
feature
keycloak/keycloak#42889 · opened on Sep 23, 2025 · 27.0 Development Milestone
6
Automatic deletion and disabling of users
feature
keycloak/keycloak#38108 · opened on Mar 14, 2025 · 27.0 Development Milestone
6
Ensure that all removed and logged out user sessions are tracked by an event
enhancement
keycloak/keycloak#44564 · opened on Nov 28, 2025 · 27.0 Development Milestone
2
PQC for OTLP exporter - support hybrid key exchange and enforcing of PQC modes
enhancement
keycloak/keycloak#51255 · opened on Jul 28, 2026 · 27.0 Development Milestone
Review and create a plan around better secret handling in Keycloak
spike
keycloak/keycloak#43959 · opened on Nov 5, 2025 · 27.0 Development Milestone
OTEL: Promote the OpenTelemetry Logs feature to supported
enhancement
keycloak/keycloak#45158 · opened on Jan 6, 2026 · 27.0 Development Milestone
3
OTEL: Promote the OpenTelemetry Metrics feature to preview/supported
enhancement
keycloak/keycloak#45159 · opened on Jan 6, 2026 · 27.0 Development Milestone
9
New LDAP testsuite
enhancement
keycloak/keycloak#44560 · opened on Nov 28, 2025 · 27.0 Development Milestone
Remove experimental transient users
eol
keycloak/keycloak#45289 · opened on Jan 9, 2026 · 27.0 Development Milestone
2
Upgrade Account UI to PatternFly 6
Unread
#52374 opened Sep 3, 2026 · Updated Nov 12, 2026
92
Verify LDAP federation compatibility on PQC-capable JDK
task
keycloak/keycloak#50789 · opened on Jul 10, 2026 · 27.0 Development Milestone
Allow preview features to be used in production
enhancement
keycloak/keycloak#44551 · opened on Nov 28, 2025 · 27.0 Development Milestone
1
Identity Assertion JWT Authorization Grant
feature
keycloak/keycloak#43971 · opened on Nov 5, 2025 · 27.0 Development Milestone
4
Update container images to use OpenJDK 25
task
keycloak/keycloak#45830 · opened on Jan 28, 2026 · 27.0 Development Milestone
4
Add support for OpenJDK 25
feature
keycloak/keycloak#43265 · opened on Oct 7, 2025 · 27.0 Development Milestone
9
Ability to continue with "browser" authentication flow after Identity provider login
feature
keycloak/keycloak#10250 · opened on Feb 16, 2022 · 27.0 Development Milestone
55
Make Event and AdminEvent immutable
enhancement
keycloak/keycloak#52918 · opened on Sep 18, 2026 · 27.0 Development Milestone
1
Documentation: sunset Migrating to Quarkus guide
task
keycloak/keycloak#52810 · opened on Sep 16, 2026 · 27.0 Development Milestone
1
Make sure that built-in admin clients do not need "full scope allowed"
task
keycloak/keycloak#52950 · opened on Sep 18, 2026 · 27.0 Development Milestone
1
Preview support for resource indicators
milestone
keycloak/keycloak#47118 · opened on Mar 13, 2026 · 27.0 Development Milestone
Supported SPIFFE client authentication
feature
keycloak/keycloak#46977 · opened on Mar 9, 2026 · 27.0 Development Milestone
1
Have a single offline session for a client in all cases
enhancement< 37E7 /a>
keycloak/keycloak#33985 · opened on Oct 16, 2024 · 27.0 Development Milestone
1

Navigation Menu

27.0 Development Milestone

Promote HTTP optimized serializers feature to supported

Deprecate the `podTemplate` field

Add strategies to deal with workflow step failures

Support for OID4VCI (OpenID for Verifiable Credential Issuance)

Automatic deletion and disabling of users

Ensure that all removed and logged out user sessions are tracked by an event

PQC for OTLP exporter - support hybrid key exchange and enforcing of PQC modes

Review and create a plan around better secret handling in Keycloak

OTEL: Promote the OpenTelemetry Logs feature to supported

OTEL: Promote the OpenTelemetry Metrics feature to preview/supported

New LDAP testsuite

Remove experimental transient users

Upgrade Account UI to PatternFly 6

Verify LDAP federation compatibility on PQC-capable JDK

Allow preview features to be used in production

Identity Assertion JWT Authorization Grant

Update container images to use OpenJDK 25

Add support for OpenJDK 25

Ability to continue with "browser" authentication flow after Identity provider login

Make Event and AdminEvent immutable

Documentation: sunset Migrating to Quarkus guide

Make sure that built-in admin clients do not need "full scope allowed"

Preview support for resource indicators

Supported SPIFFE client authentication

Have a single offline session for a client in all cases

Issues