What Is New and Coming for Managing Cloud Native Identities in…
summary
Keycloak now ships concrete features: Passkeys with recovery codes and credential recovery in 26.6, SCIM preview (26.7) for standardized user/group provisioning, and machine identity support via SPIFFE/SPIRE and Kubernetes service account tokens plus short‑lived credentials rather than client secret rotation. Stateless multi‑cluster V2 connects clusters by sharing a single DB (single‑region, multi‑AZ), shared signals provides event hooks for session/agent termination, JDBC ping improves split‑brain handling, and graceful shutdown with seamless rolling updates is implemented and demoed.
AI-written summary · about
chapters (11)
- 0:00Keycloak identity updates
- 0:21Keycloak 26.6 passkeys & recovery
- 1:06User lifecycle workflows
- 1:27Keycloak 26.7 SCIM preview
- 2:09Stateless Keycloak clusters
- 3:15Short-lived credentials & K8s
- 3:57Shared event signals
- 5:43Split brain detection
- 6:45Graceful shutdown
- 8:52Live demo: graceful shutdown
- 10:43Q&A multi-region setups
related talks
09mNavigating the Identity Abyss in the AI‑Native Era
25mIdentities and Authentication for Your Agents With Keycloak
07mWelcome + Opening Remarks
14mKeycloak Journey - Evolution of Business and Community
30mAdvancing Machine to Machine Workflows with the SPIFFE Identity Provider
23mKeynote: Cloud & Cloud Native Identity and Access Management: Challenges & Opportunities
36mCloud Native Identity Management
29mNo More Secrets With Keycloak's Federated Client Authentication