The new Admin Console is now graduated to preview, with the plan for it to become the default admin console in Keycloak 19.
If you find any issues with the new console, or have some suggestions for improvements, please let us know through https://github.com/keycloak/keycloak/discussions/categories/new-admin-console[GitHub Discussions].
== Step-up authentication
{project_name} now supports Step-up authentication. This feature was added in Keycloak 17, and was further polished in this version.
For more details, see link:{adminguide_link}#_step-up-flow[{adminguide_name}].
Thanks to https://github.com/CorneliaLahnsteiner[Cornelia Lahnsteiner] and https://github.com/romge[Georg Romstorfer] for the contribution.
{project_name} now supports Client Secret Rotation through customer policies. This feature is now available as a preview feature and allows that confidential clients can be provided with realm policies allowing the use up to two secrets simultaneously.
For more details, see link:{adminguide_link}#_secret_rotation[{adminguide_name}].
{project_name} now supports WebAuthn id-less authentication. This feature allows that WebAuthn Security Key will identify the user during authentication as long as the
The {project_name} Quarkus distribution now supports importing your realms directly at start-up. For more information, check the corresponding https://www.keycloak.org/server/importExport[guide].
=== JSON and File Logging improvements
The {project_name} Quarkus distribution now initially supports logging to a File and logging structured data using JSON.
For more information on the improvements, check the corresponding https://www.keycloak.org/server/logging[guide].
=== Environment variable expansion for values in keycloak.conf
The {project_name} Quarkus distribution now supports expanding values in keycloak.conf from environment variables, e.g. `log-level=${ROOT_LOG_LVL:info}` would look for an environment variable names `ROOT_LOG_LVL` first and default to info if it could not find it.
For more information, check the corresponding https://www.keycloak.org/server/configuration[guide].
=== New Option db-url-port
You can now change the port of your jdbc connection string explicitly by setting the new `db-url-port` configuration option. As for the other convenience options, this option will be overridden by the value of a full `db-url`, if set.
=== Split metrics-enabled option into health-enabled and metrics-enabled
The `metrics-enabled` option now only enables the metrics for {project_name}. To enable the readiness and liveness probe, there's the new build option `health-enabled`. This allows more fine-grained usage of these options.