By default, Keycloak caches realm metadata and users. There are two separate caches, one for realm metadata (realm, application, client, roles, etc...) and one for users. These caches greatly improves the performance of the server.

The realm and user caches can be disabled through configuration or through the management console. To manally disable the realm or user cache, you must edit the keycloak-server.json file in your distribution. Here's what the config looks like initially. You must then change it to: You can also disable either of the caches at runtime through the Keycloak admin console Realm Settings page. This will not permanently disable the cache. If you reboot the server, the cache will be re-enabled unless you manualy disable the cache in the keycloak-server.json file.

To clear the realm or user cache, go to the Keycloak admin console Realm Settings page. Disable the cache you want. Save the settings. Then re-enable the cache. This will cause the cache to be cleared.

Cache configuration is done within keycloak-server.json. Changes to this file will not be seen by the server until you reboot. Currently you can only configure the max size of the user cache.