keycloak-scim/release_notes/topics/12_0_0.adoc

= Highlights

== Keycloak.X distribution preview

Introduction a preview of the new and upcoming Keycloak.X distribution. This distribution is powered by Quarkus, bringing
significant improvements to startup time and memory consumption, as well as making it a lot easier to configure Keycloak.

== New Account console is now the default

The new account console is no longer a preview feature and is now the default account console in Keycloak. The old account
console will stay around for a while. For those that have a custom theme for the old account console the old console
will be used by default, giving you the time to update your custom theme to the new account console.

== OpenID Connect Back-Channel Logout

Support for OpenID Connect Back-Channel Logout is now available, thanks to https://github.com/DaSmoo[DaSmoo] and
https://github.com/benjamin37[benjamin37].

== Upgrade to Wildfly 21

The {project_name} server was upgraded to use Wildfly 21 as the underlying container.

== Ability to request AuthnContext in SAML identity provider

Support for specification of AuthnContext section in authentication requests issued by SAML identity provider has been added.

Thanks to https://github.com/lscorcia[lscorcia]

== FAPI RW support and initial support to Client policies

There was lots of the work done to have support for Financial-grade API Read and Write API Security Profile (FAPI RW). This is available
with the usage of Client policies and it is still in the preview state. You can expect more polishing in the next releases.
Thanks to https://github.com/tnorimat[Takashi Norimatsu] and all the members of the https://github.com/keycloak/kc-sig-fapi[FAPI Special interest group].

== Upgrade login theme to PatternFly 4

The {project_name} login theme components have been upgraded to PatternFly 4.
The old PatternFly 3 runs simultaneously with the new one, so it's possible to have PF3 components there.

There are also design changes in the login theme for better user experience.
You can even define an icon for your custom Identity providers.
For details, please refer to the link:{developerguide_link}#custom-identity-providers-icons[docs].

== Gatekeeper EOL
Gatekeeper reached end of life, in November 21. This means that we no longer support, or update it. The announcement is available https://www.keycloak.org/2020/08/sunsetting-louketo-project.adoc[here].

== Other improvements

* Support for OAuth2 Client Credentials grant without refresh token and without user session. Thanks to https://github.com/thomasdarimont[Thomas Darimont]
* Support for send access tokens to the OAuth2 Revocation endpoint
KEYCLOAK-14961 Update release notes 2020-09-04 06:05:49 +00:00			`= Highlights`

Release notes for KC 12 2020-11-26 08:47:46 +00:00			`== Keycloak.X distribution preview`

			`Introduction a preview of the new and upcoming Keycloak.X distribution. This distribution is powered by Quarkus, bringing`
			`significant improvements to startup time and memory consumption, as well as making it a lot easier to configure Keycloak.`

			`== New Account console is now the default`

			`The new account console is no longer a preview feature and is now the default account console in Keycloak. The old account`
			`console will stay around for a while. For those that have a custom theme for the old account console the old console`
			`will be used by default, giving you the time to update your custom theme to the new account console.`

			`== OpenID Connect Back-Channel Logout`

Minor typo fix 2020-12-16 16:26:08 +00:00			`Support for OpenID Connect Back-Channel Logout is now available, thanks to https://github.com/DaSmoo[DaSmoo] and`
Release notes for KC 12 2020-11-26 08:47:46 +00:00			`https://github.com/benjamin37[benjamin37].`

			`== Upgrade to Wildfly 21`

			`The {project_name} server was upgraded to use Wildfly 21 as the underlying container.`

KEYCLOAK-14961 Update release notes 2020-09-04 06:05:49 +00:00			`== Ability to request AuthnContext in SAML identity provider`

			`Support for specification of AuthnContext section in authentication requests issued by SAML identity provider has been added.`

			`Thanks to https://github.com/lscorcia[lscorcia]`
FAPI RW support to release notes 2020-10-21 16:28:47 +00:00
			`== FAPI RW support and initial support to Client policies`

			`There was lots of the work done to have support for Financial-grade API Read and Write API Security Profile (FAPI RW). This is available`
			`with the usage of Client policies and it is still in the preview state. You can expect more polishing in the next releases.`
			`Thanks to https://github.com/tnorimat[Takashi Norimatsu] and all the members of the https://github.com/keycloak/kc-sig-fapi[FAPI Special interest group].`
KEYCLOAK-14139 Upgrade login screen to PF4 docs 2020-10-14 12:56:28 +00:00
			`== Upgrade login theme to PatternFly 4`

			`The {project_name} login theme components have been upgraded to PatternFly 4.`
			`The old PatternFly 3 runs simultaneously with the new one, so it's possible to have PF3 components there.`

Minor typo fix 2020-12-16 16:26:08 +00:00			`There are also design changes in the login theme for better user experience.`
KEYCLOAK-14139 Upgrade login screen to PF4 docs 2020-10-14 12:56:28 +00:00			`You can even define an icon for your custom Identity providers.`
			`For details, please refer to the link:{developerguide_link}#custom-identity-providers-icons[docs].`
KEYCLOAK-9551 Client Credentials Grant should not generate refresh token 2020-11-05 16:36:02 +00:00
[KEYCLOAK-16550] Remove Gatekeeper from the docs 2020-12-04 15:57:30 +00:00			`== Gatekeeper EOL`
			`Gatekeeper reached end of life, in November 21. This means that we no longer support, or update it. The announcement is available https://www.keycloak.org/2020/08/sunsetting-louketo-project.adoc[here].`

KEYCLOAK-9551 Client Credentials Grant should not generate refresh token 2020-11-05 16:36:02 +00:00			`== Other improvements`

			`* Support for OAuth2 Client Credentials grant without refresh token and without user session. Thanks to https://github.com/thomasdarimont[Thomas Darimont]`
			`* Support for send access tokens to the OAuth2 Revocation endpoint`