ofKeycloak 26.7.0 is now available. Released on July 9, 2026, the new version of the open-source Identity and Access Management (IAM) platform brings meaningful capabilities for both administrators and developers. Here are the main highlights.
Highlights of Keycloak 26.7.0
- Automated user provisioning with the SCIM API (preview): automate user onboarding and offboarding by integrating Keycloak with external systems through the SCIM standard.
- Simplified multi-cluster high availability (preview): run multi-cluster deployments without external caches, reducing operational complexity.
- Enhanced reverse proxy guides: new blueprints for HAProxy and Traefik.
- Step-up authentication for SAML clients: enforce a stronger authentication level based on each application’s sensitivity.
- More secure Identity Brokering API (v2): per-client authorization, confidential clients only, and OAuth 2.0-compliant endpoints.
Why it matters
Keycloak is a common building block in API and enterprise application security architectures. Features like SCIM provisioning, simplified high availability, and the hardened Identity Brokering API make it easier to govern identities at scale and strengthen security across multi-IdP environments. At CloudAPPi we help our clients adopt and harden IAM platforms such as Keycloak as part of their API governance and security strategies.
You can review all the details and download the release in the official Keycloak 26.7.0 announcement.
